lapidaire-projects.com

What it is

Lapidaire Projects B.V. is a Dutch company and an authorized partner of Dispel. The product described on its website is not a traditional VPN, but an on-demand secure remote access service based on SASE and ZTNA principles. It focuses on ICS/OT networks in critical infrastructure, offline industrial control systems, machine-to-machine communications, as well as secure access to file servers, video conferencing, VoIP, and messaging.

Core capabilities

The solution’s key differentiator is Moving Target Defense: remote access sessions are created dynamically when needed, routed through multi-cloud SD-WAN virtual hubs to form what it calls an Enclave, and then destroyed after the session ends. This is designed to hide entry points, exit points, and connection paths, reducing the risk of reconnaissance and target fixation. IT/OT access is implemented out-of-band through on-site entry devices, with an emphasis on avoiding dependence on existing IT/OT system entry points and preserving network segmentation. For authentication, it supports temporary one-time passwords, Okta, MFA/user directories, Active Directory, and hardware tokens. Encryption uses dual-layer AES-256 and independent 4096-bit RSA keys. For management and auditing, it offers optional live monitoring, screen recording, network logs, and integration with enterprise SIEM or third-party SOC systems.

Pricing and deployment

The website clearly states that pricing is not based on users or endpoints, but on infrastructure and concurrent sessions. Specific pricing is not disclosed; users need to contact the company for a demo or quote. For deployment, it emphasizes same-day implementation, with training and go-live taking less than one day. No client needs to be installed on every endpoint, and the service provider updates the infrastructure daily. Public materials do not provide details on SLA, availability zone coverage, or nodes in China.

Pros and cons

The strengths are its clear positioning, especially for OT remote operations and maintenance, and controlled access for third-party service providers. Dynamic network teardown, endpoint invisibility, and IT/OT segmentation make it more focused on reducing exposure than traditional static remote access. Auditing and SIEM/SOC integrations are also useful for compliance and traceability. The drawbacks are limited public information and the presence of placeholder text on the site. It does not disclose compliance certifications, detailed architecture, price ranges, or support response standards. In addition, Lapidaire Projects is primarily a partner using Dispel technology, so its underlying capabilities and roadmap depend on Dispel.

Who it is for and access from China

It is better suited to critical infrastructure operators, OT service providers, government/healthcare organizations, or enterprises that need to protect sensitive centralized servers. If the requirement is only ordinary office remote access, the cost and complexity should be compared carefully. Access from mainland China is unknown, and the website does not mention local payment, invoicing, nodes, or ICP filing. Before procurement, buyers should test connectivity, latency, and compliance requirements. Alternatives include Dispel, Zscaler Private Access, Cloudflare Zero Trust, Tailscale, Teleport, BeyondTrust, Palo Alto Prisma Access, as well as domestic zero-trust and secure remote operations solutions.