Operational technology · Generation fleet
NextEra's Power Generation Division has published what it is building: role-based access control, secure remote access, asset inventory automation, hardening and recovery, all under a NERC CIP-aligned programme. Xage did not write that list. We just happen to be the fabric that closes every line on it, agentlessly, across a fleet measured in thousands of sites rather than dozens of data centres.
Why now
On the scattered, thinly staffed, multi-vendor sites that produce the power. That is where tooling built for IT has always stopped.
The recent NERC CIP revisions reclassify assets that were historically treated as low-impact, among them substations and distributed energy resources, and subject them to stricter controls.
For an operator whose fleet is distributed energy resources, that re-scopes the entire estate. And the controllers now in scope are the ones that will never run an agent.
A backlog near 33 GW with commercial operation dates inside two years means sites arriving continuously, each with turbine, inverter, storage and balance-of-plant vendors needing access from the first day of commissioning.
Access provisioned site-by-site by hand does not survive that rate. Identity provisioned as the site comes online does, and it arrives already audit-ready.
You are monetising AI-driven load growth through large-scale power agreements while adopting AI and automation inside your own operations. Those are two different security problems that most vendors make you solve with two different products.
Xage enforces zero trust for AI agents and LLMs at the protocol layer, underneath the AI stack, where a prompt cannot talk its way past the control. The same fabric and the same policy model as the fleet, with one audit trail across both.
The mapping
The left column is your programme, described in your own published language. We have only filled in the right.
Why IT-centric tooling stalls here
Energy operators reach for IT tools to secure distributed generation because that is what is already licensed. But IT-centric tooling cannot natively secure industrial control systems, and the gap it leaves is magnified across every interconnected OT, IT and cloud boundary in the fleet.
Asset protection without software on the legacy component. Most OT rollouts stop at the plant fence. This one goes past it.
The US Department of Energy's National Renewable Energy Laboratory selected Xage for its clean energy cybersecurity programme.
Runs natively on NVIDIA BlueField DPUs for hardware-accelerated enforcement, with stated support for 10M assets and 400 Gbps throughput.
Utilities serving millions of customers use the fabric for grid-wide policy enforcement and NERC CIP evidence from a single pane.
NextEra's annual report assigns accountability for material cybersecurity risk to the vice president and chief information officer, the vice president cybersecurity and the executive director cybersecurity, with board oversight that includes a summary of annual cyber drill results.
Sit with that last one. A board that reads drill results every year will eventually ask why recovery on the generation fleet looks different from recovery on the corporate network. The fleet was never built to be accessed the way the corporate network is. Identity-based enforcement is how those two answers converge, and how the drill summary loses its asterisk.
A first conversation
Pick a single operating asset, ideally one that is thinly staffed and about to come into CIP scope. We will work that one all the way down.