Cyber asset attack surface management (CAASM) is focused on enabling security teams to overcome asset visibility and exposure challenges. It enables organizations to see all assets (internal and external), primarily through API integrations with existing tools, query consolidated data, identify the scope of vulnerabilities and gaps in security controls. These tools then continuously monitor and analyze detected vulnerabilities to drill down the most critical threats to the business and prioritize necessary remediation and mitigation actions for improved cyber security.

Cyber Asset Attack Surface Management

Gartner defines the cyber-physical systems (CPS) protection platforms market as products and services that use knowledge of industrial protocols, operational/production network packets or traffic metadata, and physical process asset behavior to discover, categorize, map and protect CPS in production or mission-critical environments outside of enterprise IT environments.
Gartner defines CPS as engineered systems that orchestrate sensing, computation, control, networking and analytics to interact with the physical world (including humans). When secure, they enable safe, real-time, reliable, resilient and adaptable performance.
Attributes of these platforms include:
- Discovery, visibility and categorization of CPS assets
- Detailed pedigree of assets
- Support for proprietary industrial protocols
- Detailed network diagrams and data flows
- Vulnerability information
- Threat intelligence management
- Integration with IT security tools

CPS Protection Platforms

Gartner defines operational technology (OT) as “hardware and software that detects or causes a change, through direct monitoring and/or control of industrial equipment, assets, processes and events”.
OT security includes practices and technologies used to protect them, but these practices and technologies are now evolving into distinct categories to address the growing threats, security practices and vendor dynamics.

Operational Technology Security

VA solutions identify, categorize and prioritize vulnerabilities as well as orchestrate their remediation or mitigation. Their primary focus is vulnerability and security configuration assessments for enterprise risk identification and reduction, and reporting against various compliance standards. VA can be delivered via on-premises, hosted and cloud-based solutions, and it may use appliances and agents.
Core capabilities include:
- Discovery, identification and reporting on device, OS, software vulnerabilities and configuration against security-related criteria
- Establishing a baseline for systems, applications and databases to identify and track changes in state
- Reporting options for compliance, control frameworks and multiple roles
Standard capabilities include:
- Pragmatic remediation prioritization with the ability to correlate vulnerability severity, asset context and threat context that then presents a better picture of true risk for your specific environment
- Guidance for remediating and configuring compensating controls
- Management of scanner instances, agents and gateways
- Direct integration with, or API access to, asset management tools, workflow management tools and patch management tools

Vulnerability Assessment

The medical device security solutions market addresses software; hardware; and network and data protection requirements for IoMT devices. These solutions enable organizations to manage IoMT devices securely; ensure IoMT endpoint and data integrity; and perform asset discovery. They share many technologies and processes used in IT and cyber-physical systems (CPS) security, such as deep packet inspection and risk identification. Medical device security solutions can help CIOs engender trust and provide safe, secure and reliable digital care delivery products and services.

Medical Device Security Solutions

The amount of information being transmitted from things continues to rise. Much of this data originates outside of the enterprise. The scale of security risks in the Internet of Things (IoT) era is therefore much greater than in the pre-IoT environment, and the 'attack surface' is much larger. Most sensor-based things have minimal computing resources, and the opportunities for antivirus, encryption and other forms of protection within things are more restricted. Therefore, IoT security products with a variety of capabilities emerged to help dispel some of these challenges.

IoT Security

The global industrial IoT platform delivers multiple integrations to industrial OT assets and other asset-intensive enterprises’ industrial data sources to aggregate, curate and deliver contextualized insights that enable intelligent applications and dashboards through an edge-to-cloud architecture.
The global industrial Internet of Things (IIoT) platform market exists because of the core capabilities of integrated middleware software that support a multivendor marketplace of intelligent applications to facilitate and automate asset management decision making. IIoT platforms also provide operational visibility and control for plants, infrastructure and equipment. Common use cases are augmentation of industrial automation, remote operations, sustainability and energy management, global scalability, IT/operational technology (OT) convergence, and product servitization of industrial products.
The IIoT platform monitors IoT endpoints and event streams, supports and/or translates a variety of manufacturer and industry proprietary protocols, analyzes data in the platform, at the edge and in the cloud, integrates and engages IT and OT systems in data sharing and consumption, enables application development and deployment and can enrich and supplement OT functions for improved asset management life cycle strategies and processes. In some emerging use cases, the IIoT platform may obviate some OT functions.

Global Industrial IoT Platforms

The IT risk management (ITRM) market focuses on solutions that support the ITRM discipline through automating common workflows and requirements. For the purposes of defining this market, IT risks are risks within the scope and responsibility of the IT department. These include IT dependencies that create uncertainty in daily tactical business activities, and IT risk events resulting from inadequate or failed internal IT processes, people or systems, or from external events.

IT Risk Management

Armis Centrix Reviews, Ratings & Features 2024 | Gartner Peer Insights

Evaluation and contract negotiation

Evaluation & Contracting

Ability to understand your organization's needs

Timely and complete response to product questions

Pricing and contract flexibility (pricing and terms)

Integration and deployment

Integration & Deployment

Availability of quality 3rd-party resources (integrators, service providers, etc.)

Ease of integration using standard APIs and tools

Quality and availability of end-user training

Ease of deployment

Service and support

Service & Support

Timeliness of vendor's response

Quality of technical support

Quality of peer user community

Product capabilities

Product Capabilities

Host Controls

Instructional

Extensions

Reporting and Management Controls

Meeting Access and Convenience

Enterprise Integration

Collaboration Integration

Workspace Integration

Workstream Collaboration

Scalability

Integration

Customization

Ease of deployment, administration, and maintenance

Additional Context

Lansweeper

runZero

OctoXLabs CAASM Platform

OctoXLabs

Armis Centrix

Armis

Axonius Platform

Axonius

JupiterOne

ThreatAware

Balbix Security Cloud

Balbix

Sevco Security

Panaseer Platform

Panaseer

1B - 3B USD

500M - 1B USD

30B + USD

250M - 500M USD

Gov't/PS/ED <5,000 Employees

<50M USD

Gov't/PS/ED 5,000 - 50,000 Employees

50M - 250M USD

10B - 30B USD

Manager, IT Security and Risk Management

Armis is easy to deploy and has various integrations available. But as a product is has lots of shortcomings, mainly around asset identification and accompanying asset details which is the basis of all other functionalities.

CYBER RISK DEFENSE CONSULTANT

Overall, the Armis product can provide a deep understanding of what is on the network at any given point (within the timeframe saved ~90 days) and is useful with security investigations. Very helpful of identification of systems that other parts of an organization simply do not know about.

Other...

Ordr

Orpheus Cyber

appNovi

Slient Breach

Support team is knowledgeable but only seems to drive results under escalation or close management from our team. Perhaps stretched too thin or lacking project management capabilities.

IT Security Engineer

Personals have been professional and helpful to respond to issues that may arise, user interface is intuitive.

Cybersecurity Engineer

Armis has been a good partner.  The tool works well.  Integrations with COTS software is easy.

IT SECURITY & RISK MANAGEMENT ASSOCIATE

Fantastic, has helped us leverage vulnerability discovery better/

HEAD OF SECURITY

Armis Centrix i must is one of the best tool I have for asset management and security. 

Active

Find the top Cyber Asset Attack Surface Management Tools with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

50M-1B USD

1B-10B USD

10B+ USD

Gov't/PS/Ed

PROJECT MANAGER

From deploying the tool to training our team members the experience has been great!

ENGINEER

its a polished and well structured  framework to shield enterprise against cyber attacks

Director of IT

I am new to the organization and implementing Armis was one of my first tasks.  I knew nothing of it prior and honestly did not have high expectations. I am glad to report I was very surprised at how well this platform reports a vast number of devices throughout the network, breaking each device down to the greatest detail, but most importantly does so in a fashion where the end user isn't overwhelmed.  

Manager of Cyber Security Engineering

The sales and services team were amazing during our POC. Was able to answer all our questions and help us create additional use cases we did not think of that provided extra value to our organization. Consulted with us about features we would like to see added and worked tirelessly when we had issues to the point that the CTO was on one of our troubleshooting calls getting into the weeds. I would consider Armis as my best vendor partner that I have in my portfolio of tools.

IT Security & Risk Management Associate

I like the amount of integrations and ability for Armis to pull data from multiple integrations and combine that data into one asset with information from all the integrations.

IT SYSTEM ADMINISTRATOR

Transformative in presenting both high and low level perspectives on your network, devices, traffic and risks. 

Sr Manager, IT Security and Risk Management

Exceptional Tool and easy to deploy. Enabled us to discover the unknown and expedite remediation efforts. 

Principal Security Information Specialist

Excellent product with support to implement. Customer success team willing to help get value from the product

IT Associate

Armis is a great network visibility tool that allows for fantastic integrations to work together and give data enrichment a new meaning, allowing for full grasp of critical infrastructure and creating reporting/alerting.

Sr. Security Engineer

Overall, the Armis deployment has been mostly seamless. The majority of difficulties faced were from an organization standpoint, as opposed to Armis. The technical, sales, and administrative support received has been outstanding. 

Armis, the asset intelligence cybersecurity company, protects the entire attack surface and manages the organization’s cyber risk exposure in real time. In a rapidly evolving, perimeter-less world Armis ensures that organizations continuously see, protect and manage all critical assets. Armis secures Fortune 100, 200 and 500 companies as well as national governments, state and local entities to help keep critical infrastructure, economies and society safe and secure 24/7. Armis is a privately held company headquartered in California.

Armis offers the market's leading asset intelligence platform designed to address the new threat landscape that connected devices create. 

35+ Fortune 100 companies trust our real-time and continuous protection to see with full context all managed, unmanaged assets across IT, Cloud, IoT devices,  medical devices (IoMT), operational technology (OT), industrial control systems (ICS), and 5G. 

Armis provides passive and unparalleled cybersecurity asset management, risk management, and automated enforcement. 

Armis customers are from across all industries, verticals & segments including governments, state, local, education (SLED), healthcare, critical infrastructure providers (CIP), retail, manufacturing, smart cities, transport, energy including organizations such as Colgate Palmolive, Allegro Microsystems, Takeda Pharmaceuticals, Mondelez, PepsiCo, DocuSign, the Booking Group and many more. 

Armis is a privately held company and headquartered in Palo Alto, California.