Can a locked-down, immutable operating system finally solve the endpoint security crisis? IGEL CEO Klaus Oestermann thinks so — and he has the numbers to back it up.

Recorded live at the IGEL Now and Next event at the Fontainebleau Resort in Miami Beach, hosts Neil Hughes (Tech Talks Network / Cybernews) and Antony Savvas (IT Europa / TechLed) sat down with IGEL CEO Klaus Oestermann for a wide-ranging conversation on one of the most important — and most underestimated — challenges in enterprise IT today: endpoint security.

What Is the IGEL Adaptive Secure Endpoint Platform?

Klaus opens by explaining what makes IGEL’s newly announced Adaptive Secure Endpoint Platform a significant leap forward. Built on an immutable operating system, the platform unifies IT and OT management under a single umbrella, integrating over 130 technology partners spanning VDI, DaaS, browser, SSE, SASE, and endpoint solutions. The platform is structured around four distinct layers — device, persona, conditional access, and contextual enforcement — giving organizations a cohesive, prevention-first architecture rather than the traditional patchwork of reactive tools.

The Three Big Takeaways from IGEL Now and Next

When asked what CIOs and security leaders should take home from the event, Klaus distilled it into three core messages:

1. Security Transformation — IGEL offers a fundamentally different security model. Rather than the industry-standard monitor, detect, mitigate, and remediate approach, IGEL’s immutable OS means many threats simply cannot take hold in the first place. You can’t compromise what you can’t write to.
2. Dramatic Cost Reduction — Based on IGEL’s own customer data, organizations typically save 65% on endpoint spending after deployment. A $10 million endpoint budget becomes roughly $3.5 million.
3. Unified Manageability Across IT and OT — For the first time, organizations can manage both x86 and ARM architectures, across both IT and operational technology environments, from a single platform.

Why the Endpoint Is Still Being Underestimated

One of the most candid moments in the conversation comes when Klaus addresses why so many IT shops continue to overlook the endpoint despite it being the primary attack surface. The uncomfortable truth, he argues, is that organizations pour resources into backup, recovery, and data center resilience — yet when ransomware strikes, it’s the endpoints that grind everything to a halt. Data may be recoverable, but if users can’t compute, the business still stops.

He points to real-world examples: high-profile attacks on a major UK retailer and a well-known automotive manufacturer, each resulting in weeks of downtime and losses running into the billions. With mandates like HIPAA 2.0 requiring organizations to restore operations within 75 hours, the traditional Windows-based recovery timeline of weeks or months is no longer acceptable.

IGEL 911: Recovery in 75 Seconds

For organizations not yet ready to move fully to the IGEL OS, Klaus outlines a pragmatic bridging strategy. Install IGEL alongside Windows, and in the event of a compromise, a single keystroke — F9, what the team calls IGEL 911 (or 999 for UK audiences) — reboots the machine into IGEL, restoring a fully operational endpoint in approximately 75 seconds. Across an entire estate of a thousand endpoints, that changes the recovery conversation entirely.

IGEL also offers the UD Pocket for true disaster recovery scenarios — including natural disasters like hurricanes — allowing employees to plug the device into any available computer and securely access corporate resources from anywhere.

Zero Trust: Is IGEL the Missing Piece?

The conversation turns to Zero Trust Architecture, a framework that many organizations acknowledge as best practice but struggle to implement in reality. Klaus argues that Zero Trust is not a single-vendor problem to solve — it is an ecosystem challenge. IGEL’s role is to start at the endpoint and bring together the right combination of technology partners to make the architecture real. He notes that this model is already being adopted across the 16 critical infrastructure sectors in the US, and that equivalent frameworks are being rolled out across European governments under different names but with the same underlying principles. The threat model, he stresses, will always evolve — but with the right architecture in place, adapting to new threats becomes far more manageable.

23 Announcements and a Growing Partner Ecosystem

The Miami event featured 23 separate announcements. Among the most significant were the Adaptive Secure Endpoint Platform itself, the IGEL IT for OT solution, and contextual access capabilities. On the partner front, major joint developments were announced with Microsoft, Omnissa, Palo Alto Networks, Netskope, and Nerdio, among others.

The Microsoft partnership is particularly noteworthy. Klaus explains that Microsoft views IGEL as one of the most effective routes to driving adoption of Azure Virtual Desktop and Windows 365, making the combination compelling from both a total cost of ownership and deployment speed perspective.

Industry-Specific Use Cases

Klaus highlights several compelling vertical examples that illustrate how IGEL’s approach translates into real operational value:

• Healthcare — Working with Imprivata and Epic, IGEL enables five-second login times for clinical staff, a measurable improvement over the minute-long authentication processes that erode productivity and patience in high-pressure environments.
• Pharmaceuticals and Process Industries — A partnership with Nemi enables wearable armband-based authentication for workers in gloves and masks who cannot use traditional smart cards or keyboards.
• Automotive Manufacturing — A major German automaker has deployed IGEL across its manufacturing floor, a decision likely accelerated by watching ransomware attacks cripple competitors.
• Contact Centers — Deep integrations with contact center vendors ensure that everything from noise reduction software to headsets functions reliably within the IGEL environment.

What CISOs Should Take Away

For CISOs, Klaus’s message is direct: business continuity and disaster recovery is the entry point, and it is resonating. Organizations that experience a ransomware attack and then deploy IGEL frequently ask why they would ever go back to a conventional OS. From there, the conversation evolves naturally into IGEL’s broader preventative security model — a shift in mindset from reactive defense to a posture where the attack surface is fundamentally reduced.

The Road Ahead: Taking the Show on the Road

Following the Miami event, IGEL is packaging its Now and Next content and taking it on the road. The European leg kicks off in London on May 28th, followed by Paris, Frankfurt, Amsterdam, and Bern through mid-June. In the autumn, the roadshow heads to Melbourne, Australia, before wrapping up with US stops in New York, Dallas, Chicago, and Washington DC. The goal is straightforward: reach the audiences who cannot travel to a flagship US event and bring the message directly to them.

Back to: Across the Tech Pond