Claroty empowers automakers to harden their production and assembly lines against cyber threats by extending comprehensive industrial cybersecurity controls to their OT, IoT, IIoT, and BMS assets, as well as all other cyber-physical systems (CPS).
Escalating inflation, competition, supply chain constraints, operational re-shoring, sustainability initiatives, and the surging popularity of ride-sharing are among many factors fueling digital transformation in the automotive industry. From innovations that expedite production and assembly lines for electric, autonomous, and other advanced models, to cloud connectivity that integrates ERP and MES data across enterprise and factory networks to drive efficiencies, to robotic controllers that boost both throughput and safety — the benefits of automation, IT/OT connectivity, and CPS across the industry are undeniable.
But for many automakers, these benefits are outpaced by industrial cybersecurity risks. The industry’s embrace of digitization continues to expand its attack surface — and the frequency of M&A activity, often-vast geographic distribution of OT environments, and widespread reliance on remote connectivity are amplifying risk exposure and complicating existing security and operational challenges. This harsh reality has manifested in recent years as ransomware infections that halt assembly lines, rogue insiders that remotely alter configurations to compromise production, and other attacks that exploit weaknesses in the CPS on which the availability, integrity, and safety of automotive manufacturing rely. Mitigating these risks to gain cyber and operational resilience requires automakers to embrace a new approach that extends beyond traditional IT security solutions.
Securing the OT environments that underpin automotive production and assembly requires that automakers follow three key principles:
A comprehensive inventory of all OT, IoT, IIoT, and BMS assets — and all other CPS — that underpin your OT environment across each plant is the foundation of effective industrial cybersecurity. It’s also why Claroty has long prioritized our ability to deliver the industry-leading visibility that our automotive customers need to secure their most critical assets and operations.
Since most CPS use proprietary protocols and legacy systems, they are simply incompatible with traditional IT solutions — but that doesn’t mean they have no place in OT. Rather than urge customers to expand their already-extensive tech stacks, Claroty integrates with them. As a result, our automotive customers can simply extend their existing tools and workflows from IT to OT.
Unlike their IT counterparts, most OT environments in automotive lack essential cybersecurity controls and consistent governance. Claroty eliminates this gap. After providing visibility into all CPS and integrating your IT tools and workflows with OT, Claroty extends your IT controls to OT — unifying your security governance and driving all use cases on your journey to cyber and operational resilience.
The Claroty journey to cyber resilience empowers automakers to extend — and further optimize — the following cybersecurity use cases and governance areas from IT to OT:
Claroty’s automated asset discovery capabilities create a centralized inventory that serves as the foundation for all cyber resilience use cases, empowering automakers with real-time inventory of all OT, IoT, and BMS assets and all other CPS throughout your OT environment.
Claroty extends your IT vulnerability and risk management controls to OT by automatically identifying, assessing, and recommending remedial actions for all vulnerabilities affecting CPS in your OT environment, enabling you to prioritize and implement mitigations to minimize lateral risk transfer.
Claroty hardens automakers' OT environments against cyber threats by automatically defining network segmentation policies to be easily enforced by your firewall and NAC solutions, as well as providing secure access purpose-built with controls for internal and third-party OT users.
Claroty enables automakers to continuously monitor for and respond to the earliest indicators of threats — ranging from ransomware, to equipment failures, to malicious insiders, to IP theft, to misconfigurations —before they impact production, assembly, safety, compliance, or other assets.
The Claroty journey to operational resilience empowers automakers to extend and optimize the following security and operational use cases and governance areas from IT to OT:
Operational resilience starts with gaining full visibility into all CPS in your OT environment. Claroty’s automated asset discovery capabilities deliver just this — providing automakers with the complete, real-time inventory you need as the foundation for all operational resilience use cases.
Change management is essential to governance, compliance, maintenance, and procurement decisions enterprise-wide. Claroty empowers MoC programs across IT and OT with continuous asset and operational monitoring and flexible reporting to inform these and related decisions.
Claroty makes it easy for automotive manufacturers to optimize asset management by connecting all asset and operational data to CMMS and CMDB systems, ensuring records are accurate and informing preventative maintenance and supply chain management decisions, among others.
Claroty xDome Secure Access offers highly secure and granularly controlled remote access that is frictionless to use and administer and supports all OT remote access use cases key to automotive manufacturing: from remote maintenance, to auditing, to vendor management and more.
Complying with recommended standards and required regulations is a notoriously complex, ever-evolving endeavor for automotive manufacturers. Claroty simplifies compliance not only with respect to cybersecurity but also in adjacent areas — from safety, to quality assurance, to supply chain, and more. Highlights include:
Claroty’s support for the full cyber-physical systems security journey supports and simplifies compliance with the requirements set forth by NHTSA, UN 155, EPA, NIS 2.0, RCE, SOCI/SLACIP, cGMPs, and many more.
Compliance with the following cybersecurity practices and standards is enabled by the controls offered by Claroty’s portfolio: CISA CGPs, NIST CSF, ISO 27001, IEC 62443, CIS, ISO/SAE DIS 21434, and many more.
Six of the largest 10 automakers worldwide trust Claroty to safeguard their CPS and the availability, integrity, and safety of the vehicles they manufacture — and that the mobility of our society depends on. Here's why:
The Top 3 automation vendors (Rockwell Automation, Schneider Electric, and Siemens) invest in, partner with, and are loyal customers of Claroty, further validating our leadership.
Our comprehensive cybersecurity platform has earned dozens of accolades for seamlessly enhancing the safety, security, and efficiency of OT, IoT, IIoT, BMS, and other CPS.
Our award-winning Team82 researchers have disclosed more vulnerabilities than any other group. Their findings enhance our platform’s protections and drive security industry-wide.
Peer Reviews for The Claroty Platform
“The product Works and helps us to protect our industrial automation environment.”
“Claroty alerts us to vulnerabilities in real-time. This is a must-have solution for our manufacturing operations because it allows our organization to quickly identify which assets have potential vulnerabilities and prioritize the actions we need to take in order to reduce and eliminate potential risks.”
Kevin TierneyVice President of Global Cybersecurity, General Motors
Claroty's vast technical ecosystem further expands the capabilities — and ROI — of our automotive customers’ existing security and operational investments. Key technical integration partners include:
Claroty xDome is a highly flexible, modular SaaS-based solution that supports your entire industrial cybersecurity journey.
Claroty xDome Secure Access delivers frictionless, reliable, and secure remote access for internal and third-party industrial personnel.
Claroty Continuous Threat Detection (CTD) is a robust solution that delivers comprehensive cybersecurity controls for industrial environments.
Want to learn more about how Claroty's portfolio will empower you to achieve cyber and operational resilience?
Enhance network visibility with Claroty's granular intelligence of connected devices used for endpoint profiling through roles and role-mapping rules to create effective enforcement policies, through Aruba's ClearPass Policy Manager.
The Claroty AirWave integration allows Claroty to connect with Aruba AirWave server and import visibility data for wired and wireless devices, that are connected using AirWave infrastructure.
NAC, Network Management
xDome/xDome for Healthcare/CTD
Visibility & Insights, NSM
Aruba AirWave, Aruba ClearPass Policy Manager
Claroty
Check Point Software Technologies is a leading provider of cyber security solutions to corporate enterprises and governments globally. Check Point Infinity’s portfolio of solutions protects enterprises and public organisations from 5th generation cyber-attacks with an industry leading catch rate of malware, ransomware and other threats. Infinity comprises three core pillars delivering uncompromised security and generation V threat prevention across enterprise environments: Check Point Harmony, for remote users; Check Point CloudGuard, to automatically secure clouds; and Check Point Quantum, to protect network perimeters and datacenters, all controlled by the industry’s most comprehensive, intuitive unified security management; Check Point Horizon, a prevention-first security operations suite. Check Point protects over 100,000 organizations of all sizes.
Firewall
xDome/xDome for Healthcare/CTD
NSM, CTD
Check Point IoT Controller, Checkpoint Management & FW GW
Claroty
CTAP Certified
The integration with Elisity supports simple API connectivity to Claroty's industrial and healthcare solutions to enrich XIoT device discovery and identity for streamlined enforcement.
Network Security
xDome/xDome for Healthcare/CTD
Visibility & Insights
Elisity
CTAP Certified
To enrich the value of device profiles and their security context, Claroty integrates with numerous Microsoft systems:
Microsoft DHCP enriches Claroty data by adding accurate IP assignment information.
Claroty's integration with Microsoft Intune enriches mobile-managed device profiles with OS, application version, and other security attributes.
Claroty's integration with Microsoft Active Directory brings in data elements that provide additional asset visibility and profiling context.
For patch management, Claroty's integration to Microsoft SCCM improves OS and application visibility for domain attached devices to improve passive vulnerability correlation precision and overall coverage.
Claroty's integration with Microsoft Defender Advanced Threat Protection (MDATP) enables cloud application discovery and is supportive of DLP strategies.
Network Management, DHCP, Mobile Device Management, Patch Management
xDome/xDome for Healthcare
Vulnerability & Risk Management, Visibility & Insights
Microsoft Active Directory, Microsoft Defender ATP, Microsoft DHCP Server using WinRM, Microsoft Intune, Microsoft SCCM
Claroty
The integrated Claroty and Mission Secure solution enables organizations to gain not only complete visibility into their OT networks, but also the ability to enforce granular, context-aware cybersecurity policies.
Network Security
xDome
Mission Secure Platform
Mission Secure
CTAP Certified
Claroty integrates with the Palo Alto Networks Cortex ecosystem and the Panorama™ firewall solution by fusing its knowledge of device profiles, communication protocols, and workflow requirements, feeding them directly into Panorama to enable an enterprise-class risk management capability.
Firewall, SIEM
xDome/xDome for Healthcare/CTD
NSM
Palo Alto NGFW
Claroty
The integration with QRadar enables vital communication events, alerts, and vulnerabilities data to flow into QRadar.
SIEM
xDome/xDome for Healthcare/CTD
Visibility & Insights
QRadar
Claroty
By providing missing device identity and incident context, the integration between Rapid7 and Claroty provides actionable threat intelligence to Rapid7 InsightIDR.
Exposure Management
xDome/xDome for Healthcare
Vulnerability & Risk Management
Rapid7 VM
Claroty
The integration with Rockwell Automation allows Rockwell customers to leverage Claroty's expertise with vulnerabilities, risks, and threat intelligence to enhance Rockwell AssetCentre's data management, centralized inventory, backup, and recovery coverage for the industrial networks.
Version Management
CTD, xDome
Claroty
The integration with Splunk allows it to consume xDome, CTD, and the Medigate Platform’s device profiling, vulnerability, risk insights, advanced traffic monitoring and threat/alert data. The combined solution powers Splunk’s advanced analytics, visualization and reporting capabilities. working with its native OT data model thus enabling advanced investigative detection and response workflows around the XIoT.
SIEM
xDome/xDome for Healthcare/CTD
Visibility & Insights
Splunk Platform
Claroty
