Telenor Linx picks Titan.ium SEPP for 5G SA roaming security
Telenor Linx, the international carrier arm of Norway's Telenor Group, has chosen Titan.ium's 5G Security Edge Protection Proxy (SEPP) to underpin its next-generation 5G Standalone (5G SA) roaming infrastructure. The deployment, announced on 14 October 2026, extends secure signalling protection across Telenor Linx's inter-operator connectivity fabric, which already spans partnerships with global digital players including Google, Meta and Netflix.
The SEPP is the 3GPP-defined boundary node that mediates all signalling exchanged between mobile network operators during roaming. It provides authentication, encryption, topology hiding and policy enforcement, preventing external parties from mapping a carrier's internal network architecture. As 5G SA deployments accelerate, the SEPP has become a non-negotiable element of the inter-operator stack: without it, operators cannot safely exchange the HTTP/2-based Service-Based Interface (SBI) messages that underpin 5G core functions.
The deployment
Titan.ium's implementation runs on its cloud-native platform, supporting automated scaling and multi-tenant operation. The vendor says the solution covers both direct interconnection models and hosted SEPP scenarios, and aligns with GSMA's 5G Mobile Roaming guidelines. A built-in policy and rules engine allows Telenor Linx to transform, filter and reroute signalling messages dynamically, which matters for an IPX carrier managing traffic across many bilateral roaming agreements simultaneously.
Frode Vestnes, chief product officer at Telenor Linx, said the company selected Titan.ium on the basis of its "deep expertise in 5G roaming security, standards compliance, and cloud-native architecture," adding that the platform needed to support a "growing global roaming ecosystem." Titan.ium's acting chief executive, Essam Bakr, positioned the win as evidence of the company's established track record, noting that its solutions are deployed in more than 80 countries by over 200 operators, including eight of the world's ten largest communications service providers.
Market context
The SEPP vendor landscape is relatively concentrated. Established telecom software suppliers with signalling heritage, including the likes of Teligent, Cellusys, Mavenir and larger network equipment providers, compete for carrier SEPP contracts alongside newer cloud-native entrants. Telenor Linx's choice of a cloud-native, software-only platform reflects a broader industry move away from appliance-based interconnect gear toward containerised, DevOps-managed network functions that can be deployed on standard server infrastructure or public cloud.
The timing is significant. Global 5G SA penetration remains relatively low outside East Asia, but major European and North American operators are now committing to SA core upgrades on commercial timelines. Each new SA launch creates an immediate requirement for bilateral SEPP agreements with roaming partners. IPX carriers and international transit hubs such as Telenor Linx sit at the centre of that negotiation web and need a SEPP solution capable of handling traffic growth without linear hardware investment.
From a standards perspective, the GSMA's IR.88 and FS.86 specifications govern 5G roaming security requirements, while the 3GPP TS 33.501 standard defines SEPP behaviour in detail. Operators and their IPX partners face ongoing pressure to demonstrate compliance with these frameworks as national regulators, particularly in the EU under the NIS2 Directive and the European Electronic Communications Code, tighten expectations around critical telecoms infrastructure security. Telenor Linx's adoption of a 3GPP-aligned, GSMA-compliant SEPP is partly a commercial differentiator and partly a regulatory baseline requirement for carriers with European footprints.
The contract does not include disclosed financial terms. Titan.ium has not stated the timeline for full production deployment or the volume of roaming traffic the Telenor Linx implementation is sized to carry.