One SIM. Global coverage. Security built in.
One pool. All your SIMs. Around the world.
Enterprise IoT deployments run across dozens of countries and thousands of devices. Managing multiple carriers, patching VPN sprawl, and troubleshooting with stale data slows everything down. IXT solves all three. One global SIM, real-time visibility, and Zero Trust security delivered natively at the network level.
The quick intro
IXT is a full MVNO that provides enterprise IoT connectivity across 600+ mobile networks in 190+ countries.
Its product suite includes a global IoT SIM with multi-IMSI and eSIM support, a shared Global Data Pool, a private networking layer (SecureNet), Zero Trust security powered by Zscaler ZTNA and Illumio, and the IXT Connectivity Management Platform (CMP) with real-time device visibility.
IXT operates its own core network infrastructure and is the only IoT connectivity provider delivering Zscaler ZTNA and Illumio visual traffic segmentation natively through the SIM, without requiring agent software on devices.
IXT Zero Trust extends Zero Trust to OT and IoT endpoints over cellular, with clientless browser-based Privileged Remote Access that supports session recording, time-limited third-party access, and employee co-presence.
Enterprise IoT has an infrastructure problem
Your devices connect across borders, handle sensitive data, and interact with third-party vendors. The connectivity infrastructure under them was not built for that.
Most IoT providers offer a SIM and a data plan. Some add a private APN or a VPN tunnel. What they do not offer is Zero Trust access control, visual traffic mapping, or infrastructure you own. You get a carrier relationship, not a security architecture.
The result is fragmented management, traffic running across the public internet, VPN complexity that grows with every new market you enter, and no audit trail when regulators ask questions.
Global SIM coverage 600+ networks, 190+ countries
One SIM works across 2G, 3G, 4G, 5G, LTE-M, and NB-IoT networks worldwide. Multi-IMSI technology selects the strongest available signal. eSIM and iSIM support, with all physical form factors. SIMs activate on first use, so you only pay when a device goes live.
Global Data Pool no stranded data, no surprise costs
Every SIM draws from a single shared data pool across all countries. No per-device caps. No overage surprises. Add or remove SIMs without renegotiating contracts. Costs stay predictable as your fleet grows.
Zero Trust security powered by Zscaler ZTNA and Illumio segmentation
IXT Zero Trust is built from two integrated components. Zero Trust Connectivity, powered by Zscaler ZTNA, makes all traffic device-initiated. No ports are exposed. No VPN clients are required on devices. Every session is verified before access is granted, and security policies are enforced at the network edge.
Zero Trust Visualisation, powered by Illumio, maps all device traffic in real time. Normal communication patterns are visible at a glance. Anomaly alerts fire when a device contacts an unexpected destination. Policy-based segmentation stops a compromised device from reaching the rest of your fleet.
This is the only solution that delivers Zscaler ZTNA and Illumio segmentation natively through the SIM, without client software on devices. It works on headless devices, OT equipment, and any cellular-connected endpoint.
Privileged Remote Access - controlled third-party access without VPN distribution
Service technicians and vendors authenticate through a browser-based portal and run SSH, VNC, or RDP sessions directly in-browser. No VPN client is distributed. Access is scoped to specific devices, time-limited, and session-recorded. This is the feature that resolves the third-party vendor access problem in industrial and OT deployments.
How IXT compares to leading IoT connectivity providers.
|
Capability |
IXT |
1NCE |
Soracom |
Emnify |
|
Zero Trust / ZTNA |
Zscaler ZTNA + Illumio visual segmentation, delivered natively at SIM level. No client software required. |
No Zero Trust architecture. No ZTNA. |
No Zero Trust architecture. No ZTNA. |
No Zero Trust architecture. No ZTNA. Security is VPN, DNS filtering, firewall policies, and IMEI lock. |
|
Global coverage |
600+ networks, 190+ countries. |
170+ countries. |
509+ networks, 213 countries and regions. |
545+ networks, 200+ countries. |
|
Privileged Remote Access |
Clientless browser-based access. SSH/VNC/RDP in-browser. Session recording. Time-limited. Third-party access scoping. Employee co-presence. |
No privileged remote access capability. |
Napter: time-limited on-demand remote access via TCP (SSH, RDP, VNC, HTTP). No browser portal. No session recording. |
No privileged remote access capability. |
|
Private networking |
SecureNet: private APN, static IP, IPSec VPN, direct cloud connections to AWS, Azure, GCP, Alibaba. |
APN and OpenVPN included as standard. No static IP or direct cloud connect equivalent. |
Private VPG (virtual private gateway), VPC peering to AWS, Canal private networking, VPN via Door service. |
Cloud Connect: IPSec VPN, OpenVPN, AWS Transit Gateway. Private IP space. DNS filtering. |
|
Visual traffic mapping |
Illumio visualisation maps all device traffic in real time. Anomaly detection. Policy-based segmentation. |
Not available. |
Not available. |
Not available. |
|
NIS2 compliance support |
Architecture directly addresses NIS2 requirements: no exposed ports, policy-based access control, session recording, traffic monitoring, and segmentation. |
No stated NIS2 answer. |
No stated NIS2 alignment. |
No stated NIS2 alignment. |
|
Full MVNO ownership |
Yes. Own core network. Greenfield IoT core. Full routing and policy control. |
Yes. |
Yes. Cloud-native, built on AWS. |
Yes. Cloud-native architecture. |
Built for NIS2, GDPR, and regulated environments.
NIS2 requires enterprises to demonstrate risk management, access control, supply chain security, and incident containment for all connected assets. Standard IoT connectivity provides no access control, no traffic visibility, and no audit trail. That is an exposure.
IXT Zero Trust addresses each requirement directly. Device-initiated traffic eliminates exposed attack surfaces. Policy-based access control replaces flat network trust. Session recording and traffic logs provide the audit records regulators ask for. Anomaly detection and segmentation address incident detection and containment.
IXT does not claim NIS2 certification. The architecture is designed to support your compliance obligations. Your legal and compliance team should assess alignment with specific regulatory requirements.
Frequently asked questions
The right IoT connectivity solution for an enterprise depends on three factors: global coverage, security architecture, and real-time device visibility. IXT provides a single SIM that works across 600+ networks in 190+ countries, Zero Trust security delivered natively at the network level without client software on devices, and a real-time Connectivity Management Platform. Enterprises with NIS2 or GDPR obligations, cross-border deployments, or third-party remote access requirements get the most from IXT's architecture.
1NCE is built for high-volume, low-data deployments at a flat rate. It offers APN and OpenVPN-based connectivity but has no Zero Trust architecture, no ZTNA, and no NIS2 compliance answer. For simple deployments where price is the primary factor, 1NCE works. For companies that need improved security, Zero Trust access control, compliance readiness, or controlled remote access, 1NCE has no comparable offering.
Soracom is a developer-friendly, API-first platform with strong tooling and coverage across 509+ networks. Its security offering includes private networking, VPN, VPC peering, and time-limited remote access via Soracom Napter. It has no Zero Trust architecture, no ZTNA, no visual traffic mapping, and no browser-based privileged remote access with session recording. IXT is designed for enterprises with regulated environments and security requirements that go beyond private networking and VPN.
Emnify is a cloud-native provider with strong API tooling, broad coverage across 545+ networks, and security features including IPSec VPN, OpenVPN, DNS filtering, and IMEI lock. It has no Zero Trust architecture, no ZTNA, no visual traffic mapping, and no privileged remote access. IXT's differentiation is the integrated Zscaler ZTNA and Illumio segmentation delivered through the SIM, and the clientless Privileged Remote Access capability that removes the need to distribute VPN clients to third-party vendors.
Zero Trust IoT connectivity is a security model where no device, session, or network is trusted by default. Every connection is verified per session, access is granted only to specific applications or destinations, and traffic is continuously inspected. For IoT devices, Zero Trust is enforced at the network level through the SIM and connectivity infrastructure, because most IoT devices cannot run agent software. IXT delivers Zero Trust IoT connectivity through an integrated combination of Zscaler ZTNA and Illumio traffic segmentation, built into its cellular platform.
NIS2 requires risk management, access control, segmentation, and audit trails for connected assets. Most IoT connectivity providers offer private networking but not the access control, segmentation, or session-level audit trails NIS2 demands. IXT Zero Trust is built on an architecture that directly addresses these requirements: no exposed ports, policy-based access control, session recording, and real-time traffic monitoring with anomaly detection.
Yes. IXT Zero Trust enforces security at the network level, not on the device. No client software is required on endpoints. This means it works with headless devices, OT equipment, industrial sensors, and any cellular-connected device that cannot run an agent.
Privileged Remote Access lets service technicians and third-party vendors access devices remotely through a browser-based portal, without distributing VPN clients. They authenticate via the portal and run SSH, VNC, or RDP sessions in-browser. Sessions are time-limited, access is scoped to specific devices, and sessions are recorded. This removes the risk of broad vendor network access while enabling the remote maintenance that industrial and OT deployments require.
You can request a test SIM to verify coverage and run a proof of concept on your deployment. Or book a demo to see the CMP, Zero Trust visualisation, and Privileged Remote Access in a live environment.