Key takeaway
The platform combines networking, secure access and threat prevention, with OmniVPN, isolated Private SASE and agentless segmentation addressing varied network conditions and OT/IoT environments.
One SD-WAN, SASE and ZTNA platform
On April 24, 2026, Xcitium announced a platform combining SD-WAN, SASE and ZTNA. Powered by patented OmniVPN, it is delivered through cloud-managed appliances and apps for PCs, laptops, tablets and phones. The architecture is intended to simplify environments that have accumulated separate SD-WAN, VPN, firewall and zero-trust tools.
Distributed SASE and data paths
The platform separates its control and data planes: only management traffic passes through Xcitium’s cloud, while customer data stays on direct network paths between sites, users and applications. Xcitium says this avoids the latency and third-party traffic routing associated with overlay networks. Regulated organizations that cannot use public cloud infrastructure can choose a Private SASE deployment isolated from the internet.
OmniVPN and difficult network conditions
OmniVPN is designed to establish direct site-to-site connections through CGNAT, cascaded NAT, cellular routers, satellite links and private IP addresses. Xcitium says this does not require port forwarding, UPnP or upstream router changes. It also detects duplicate IP assignments before connecting and alerts administrators to reduce silent routing conflicts as networks grow.
Universal ZTNA for office and remote users
Xcitium Universal ZTNA is designed to apply the same zero-trust policies to users in and out of the office. Application-level access decisions can use user role and group, schedules, location verified through endpoint GPS and IP data, and multi-factor authentication, with geofencing as an additional check. Identity and policies follow users between home and office networks, without a separate VPN client to launch.
Agentless segmentation for IT, OT and IoT
Patent-pending agentless micro-segmentation isolates devices at the network layer without endpoint software, VLAN switches or complex cabling changes. This also suits OT and IoT environments where agents may be impractical. Administrators can isolate a suspicious device in two actions from the Xcitium web console, for incident response or scheduled maintenance.
Enterprise and MSP deployment
Appliances range from compact branch devices to enterprise models with 10G SFP+ and 1G RJ45 interfaces, redundant power and industrial-grade processors; virtual and cloud deployments are also supported. MSPs, MSSPs and IT consultants get multi-tenancy, zero-touch deployment, automatic software and security database updates, and local and remote API integration.
Additional networking capabilities
Announced capabilities include SD-WAN with multi-WAN load balancing, prioritization and automatic failover; a next-generation firewall with IP and DNS filtering; CountryBlock for entire country IP ranges; continuous asset discovery and device fingerprinting; posture management for local and remote devices; local OpenVAS-based vulnerability scanning; ntopng-powered network monitoring; and real-time alerts for user activity, network events and suspicious behavior.
Availability
Xcitium said the platform was immediately available to enterprises, MSPs, MSSPs and channel partners.