OT and IoT security
Specialized visibility, protocol inspection, and anomaly detection systems for operational technology (OT), SCADA, industrial control systems, and connected IoT devices.
Key Technical Considerations Before Procuring
Passive network sniffing is strictly mandatory in OT environments to avoid crashing delicate legacy PLCs with active scanning probes.
Documented Solutions in this Category
Showing 10 published solutions with verified evidence
Claroty xDome
Claroty xDome from Claroty focuses on cyber-physical asset visibility and exposure assessment. It is operational technology security technology used for understanding or protecting industrial and connected assets. Capabilities - Industrial threat monitoring: Examines activity in operational environments for signs requiring security investigation. - Operational exposure assessment: Assesses weaknesses or exposure affecting the supported operational assets. - Controlled remote access: Provides the documented access controls for external or remote work on operational systems. - Operational segmentation: Provides protection mechanisms for limiting exposure or traffic pathways within the operational environment. Use and operational context Claroty xDome is relevant to teams securing industrial, healthcare or other operational environments when the requirement centers on understanding or protecting industrial and connected assets. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Self-managed / on-premises option documented by the vendor. Before adoption, review asset and protocol coverage, discovery impact, change-control requirements and the availability needs of operational systems. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Claroty xDome focuses on understanding or protecting industrial and connected assets. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Continuous Threat Detection
Continuous Threat Detection from Claroty focuses on industrial network monitoring and threat detection. It is operational technology security technology used for understanding or protecting industrial and connected assets. Capabilities - Operational asset discovery: Builds visibility into the operational or connected assets covered by the deployment. - Industrial threat monitoring: Examines activity in operational environments for signs requiring security investigation. - Operational exposure assessment: Assesses weaknesses or exposure affecting the supported operational assets. - Controlled remote access: Provides the documented access controls for external or remote work on operational systems. - Operational segmentation: Provides protection mechanisms for limiting exposure or traffic pathways within the operational environment. Use and operational context Continuous Threat Detection is relevant to teams securing industrial, healthcare or other operational environments when the requirement centers on understanding or protecting industrial and connected assets. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Before adoption, review asset and protocol coverage, discovery impact, change-control requirements and the availability needs of operational systems. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Continuous Threat Detection focuses on understanding or protecting industrial and connected assets. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Secure Remote Access
Secure Remote Access from Claroty focuses on controlled remote access to operational environments. It is operational technology security technology used for understanding or protecting industrial and connected assets. Capabilities - Industrial threat monitoring: Examines activity in operational environments for signs requiring security investigation. - Controlled remote access: Provides the documented access controls for external or remote work on operational systems. - Operational segmentation: Provides protection mechanisms for limiting exposure or traffic pathways within the operational environment. Use and operational context Secure Remote Access is relevant to teams securing industrial, healthcare or other operational environments when the requirement centers on understanding or protecting industrial and connected assets. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Self-managed / on-premises option documented by the vendor. Before adoption, review asset and protocol coverage, discovery impact, change-control requirements and the availability needs of operational systems. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Secure Remote Access focuses on understanding or protecting industrial and connected assets. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Dragos Platform
Dragos Platform from Dragos focuses on industrial asset visibility and threat detection. It is operational technology security technology used for understanding or protecting industrial and connected assets. Capabilities - Operational asset discovery: Builds visibility into the operational or connected assets covered by the deployment. - Industrial threat monitoring: Examines activity in operational environments for signs requiring security investigation. - Operational exposure assessment: Assesses weaknesses or exposure affecting the supported operational assets. - Industrial network analysis: Uses the documented network visibility to understand activity within operational environments. Use and operational context The Dragos Platform addresses visibility and threat detection in industrial environments. Review the assets and traffic it can observe, the context supplied with an industrial security finding and the process used by operational and security teams to assess a proposed response. Deployment and evaluation Before adoption, review asset and protocol coverage, discovery impact, change-control requirements and the availability needs of operational systems. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Dragos Platform focuses on understanding or protecting industrial and connected assets. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Guardian
Guardian from Nozomi Networks focuses on operational network asset monitoring and threat detection. It is operational technology security technology used for understanding or protecting industrial and connected assets. Capabilities - Operational asset discovery: Builds visibility into the operational or connected assets covered by the deployment. - Industrial threat monitoring: Examines activity in operational environments for signs requiring security investigation. - Operational exposure assessment: Assesses weaknesses or exposure affecting the supported operational assets. - Industrial network analysis: Uses the documented network visibility to understand activity within operational environments. Use and operational context Nozomi Guardian addresses operational network visibility and threat detection. Review where its monitoring components will be positioned, which assets and protocols can be assessed and how its observations are reviewed by the operational and security teams. Deployment and evaluation Before adoption, review asset and protocol coverage, discovery impact, change-control requirements and the availability needs of operational systems. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Guardian focuses on understanding or protecting industrial and connected assets. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Vantage
Vantage from Nozomi Networks focuses on cloud-managed operational technology security visibility. It is operational technology security technology used for understanding or protecting industrial and connected assets. Capabilities - Operational asset discovery: Builds visibility into the operational or connected assets covered by the deployment. - Industrial threat monitoring: Examines activity in operational environments for signs requiring security investigation. - Operational exposure assessment: Assesses weaknesses or exposure affecting the supported operational assets. - Industrial network analysis: Uses the documented network visibility to understand activity within operational environments. - Operational segmentation: Provides protection mechanisms for limiting exposure or traffic pathways within the operational environment. Use and operational context Nozomi Vantage provides cloud-managed visibility into the operational security information included in the deployment. Review the sites and monitoring components contributing data, how the central team investigates a finding and the access boundaries between different operational environments. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review asset and protocol coverage, discovery impact, change-control requirements and the availability needs of operational systems. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Vantage focuses on understanding or protecting industrial and connected assets. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Tenable OT Security
Tenable OT Security from Tenable focuses on operational technology asset visibility and risk assessment. It is operational technology security technology used for understanding or protecting industrial and connected assets. Capabilities - Operational asset discovery: Builds visibility into the operational or connected assets covered by the deployment. - Industrial threat monitoring: Examines activity in operational environments for signs requiring security investigation. - Operational exposure assessment: Assesses weaknesses or exposure affecting the supported operational assets. - Industrial network analysis: Uses the documented network visibility to understand activity within operational environments. - Operational segmentation: Provides protection mechanisms for limiting exposure or traffic pathways within the operational environment. Use and operational context Tenable's OT security entry addresses visibility and risk assessment for operational assets. Review discovery and monitoring requirements, the industrial information supplied with a finding and how the operational owner evaluates a proposed security correction. Deployment and evaluation Before adoption, review asset and protocol coverage, discovery impact, change-control requirements and the availability needs of operational systems. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Tenable OT Security focuses on understanding or protecting industrial and connected assets. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Edge
Edge from TXOne Networks focuses on industrial network threat prevention. It is operational technology security technology used for understanding or protecting industrial and connected assets. Capabilities - Operational asset discovery: Builds visibility into the operational or connected assets covered by the deployment. - Industrial threat monitoring: Examines activity in operational environments for signs requiring security investigation. - Operational exposure assessment: Assesses weaknesses or exposure affecting the supported operational assets. - Industrial network analysis: Uses the documented network visibility to understand activity within operational environments. - Operational endpoint protection: Adds endpoint-level controls intended for the supported industrial systems. - Operational segmentation: Provides protection mechanisms for limiting exposure or traffic pathways within the operational environment. Use and operational context TXOne Edge addresses network protection in operational environments. Review how the selected Edge components fit industrial traffic paths, how protection policy is maintained and how the operational team assesses changes without compromising required system availability. Deployment and evaluation Before adoption, review asset and protocol coverage, discovery impact, change-control requirements and the availability needs of operational systems. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Edge focuses on understanding or protecting industrial and connected assets. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Portable Inspector
Portable Inspector is a hardware security product from TXOne Networks, focused on portable industrial endpoint security inspection. Capabilities - Portable endpoint threat inspection: Provides the documented portable inspection workflow for industrial endpoints. - Removable-media scanning workflow: Examines supported content through the portable scanning process described by TXOne. - Operational device assessment: Addresses the operational device assessment scope described for the selected product. Use and operational context Portable Inspector is relevant to teams assessing devices in operational environments when the requirement centers on checking supported industrial endpoints through a portable inspection workflow. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Physical hardware device; integration requirements depend on the selected model. Before adoption, review device compatibility, inspection impact, handling of findings and the restrictions governing operational systems. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Portable Inspector focuses on checking supported industrial endpoints through a portable inspection workflow. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Stellar
Stellar from TXOne Networks focuses on industrial endpoint security and application protection. It is operational technology security technology used for understanding or protecting industrial and connected assets. Capabilities - Operational asset discovery: Builds visibility into the operational or connected assets covered by the deployment. - Industrial threat monitoring: Examines activity in operational environments for signs requiring security investigation. - Operational exposure assessment: Assesses weaknesses or exposure affecting the supported operational assets. - Industrial network analysis: Uses the documented network visibility to understand activity within operational environments. - Operational endpoint protection: Adds endpoint-level controls intended for the supported industrial systems. - Operational segmentation: Provides protection mechanisms for limiting exposure or traffic pathways within the operational environment. Use and operational context TXOne Stellar addresses endpoint protection in operational environments. Evaluate the supported industrial devices and the application or execution policies being applied, with a pilot that reflects the availability and change-control requirements of the operational team. Deployment and evaluation Before adoption, review asset and protocol coverage, discovery impact, change-control requirements and the availability needs of operational systems. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Stellar focuses on understanding or protecting industrial and connected assets. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.