Works with your network
Private local core, carrier APN, field area network, local breakout, hybrid, or any mix of them.
Vendor-agnostic across Nokia, Ericsson, Druid, Athonet, Celona, Cisco, and carrier-hosted cores, on-prem or in the cloud.
One device identity that follows the asset as it roams from one network to the next.
Network architectures
The architectures we support
OneLayer doesn't replace your network. It integrates with whichever one you run. Pick the model closest to yours to see how OneLayer connects to its core, or read on for how it spans the combinations most customers actually run.
Your traffic rides the carrier's RAN and core but is logically segregated, delivered as a dedicated APN or the newer 5G network slice, with no radio or core to build. Wide-area reach, fast. Common for grid/SCADA endpoints, fleets, and logistics.
Know moreAcross networks
Track and monitor devices as they
switch between network services,
failover, or roam
Your devices don't stay on one network. The same asset might run on your private network on-site, a public carrier off-site, and a partner's network across a border. OneLayer keeps one identity and one asset record per device across all of them, and feeds that context to your security stack at every transition, so visibility doesn't fragment at the boundary.
Roaming
An asset leaves your private core for a public carrier and back, or crosses operators on one SIM via multi-IMSI / eSIM. Its home subscriber data authenticates it, and OneLayer keeps one identity attached throughout.
Hybrid networks
A private core interworking with a public MNO. This is where visibility is hardest, and where a single cross-network view of the device matters most.
Local breakout & slices
Some traffic breaks out locally, some backhauls, some rides a dedicated slice. However the network is partitioned, OneLayer keeps one consistent inventory across it.
How OneLayer fits
Integrated with the network you
already run
On-prem or cloud, full-stack or software core, your own or carrier-hosted: OneLayer integrates with the cellular network you run and the security stack you already own, turning it into a fully inventoried, identity-aware network. No agents on your devices, nothing inline in the data path.
01 · ONBOARD
Integrates with your core’s management interfaces to discover every device and SIM and bind each to a verified identity, replacing homegrown provisioning scripts.
02 · OBSERVE
Passively analyzes a mirrored copy of network signaling to fingerprint devices and keep a live inventory. Read-only and out-of-band.
03 · PROTECT
Pushes verified device context to the tools you already run, including CMDB, SIEM, NGFW, which remain the enforcement point, and flags an authorized SIM in the wrong device.
