Reach DoD Zero Trust Target Level for OT. Without replacing a single device.

DTM 25-003 is a DoD Directive-Type Memorandum issued in July 2025. It requires all DoD Components to reach Target Level Zero Trust across unclassified and classified systems, including Operational Technology (OT) environments. It defines 7 pillars and the specific activities each must address.

The DoD guidance explicitly states that traditional IT security approaches can be 'ineffective and potentially dangerous' in OT environments. OT systems put availability and safety first and rely on legacy industrial protocols. They cannot tolerate downtime, and often cannot run agents, be patched, or move to cloud enclaves.

Access Gate connects to your existing network and uses a software-defined networking (SDN) overlay. The overlay places a lightweight, identity-aware proxy in front of each OT asset. The underlying network stays unchanged: no rewiring, no recabling, no changes to PLCs, HMIs, or switches. All access then passes through a Zero-Trust enforcement boundary.

Yes. Trout Access Gate is fully on-premise and has no cloud dependency. Its policy engine runs locally, making it suitable for air-gapped, intermittently connected, and classified environments. No data leaves the site.

Access Gate is installed in a day per site. Once installed, it immediately starts building an asset inventory and enforcing access policies. The alignment guide documents which DoD activities are addressed out of the box and which require policy configuration.

DTM 25-003 directly mandates DoD Components. However, the same NIST 800-171 controls underpin CMMC Level 2, which defense contractors must meet to handle CUI. The 7-pillar framework provides a useful architecture reference for contractors preparing for CMMC assessments on OT environments.

Target Level is the baseline required by DTM 25-003. It covers the core activities within each pillar: identity verification, device inventory, network segmentation, data classification, and continuous monitoring. Advanced Level adds deeper capabilities like dynamic policy automation and behavioral analytics. Access Gate addresses Target Level across all 7 pillars.

Access Gate performs passive asset discovery to build a real-time inventory of every device on the network, including OT assets that cannot run agents or respond to active scans. This addresses Activities 2.1 through 2.7 without touching the devices. The overlay network then enforces deny-by-default access per device.

Yes. Access Gate generates session logs, policy configurations, segmentation baselines, and access control records that map directly to DTM 25-003 activities. Assessors can review who accessed what, when, through which protocol, and whether the session was authorized. All evidence is stored on-premise.

Access Gate runs a local policy engine that automates access decisions, alert generation, and configuration enforcement. Policies are version-controlled and can be deployed across multiple sites through the management plane. No cloud orchestration or external API calls are required.

The alignment guide is UNCLASSIFIED and publicly available. Access Gate itself operates in air-gapped, classified, and SCIF environments with no cloud dependency. Specific deployment guidance for classified networks is available through direct engagement with the Trout team.