Integration at a glance
| Item | Detail |
|---|---|
| Partner product | Claroty Continuous Threat Detection (CTD) |
| Integration method | DeRISK reads CTD data through the CTD API. Read-only. The API connection needs no manual effort and keeps the data current for analysis. Manual import of API JSON output files is also supported, so the OT environment never needs a standing connection to DeRISK in the cloud. |
| Data used | Asset inventory, vulnerabilities, network zones, communication links |
| Built and supported by | DeNexus |
| Certification | Certified by Claroty (Claroty Technology Alliance Program) |
| DeRISK grades supported | Level 4 · Evidence-Grade (facility data) and Level 5 · Engineering-Grade (zone data), as each grade becomes available |
The challenge
CTD gives OT teams a detailed picture of assets, vulnerabilities and threats. Executives and boards ask a different question: what could this cost us, and which project reduces that cost most? A list of CVEs and alerts does not answer it.
How it works
CTD discovers OT assets, maps their communications and finds vulnerabilities.
DeRISK CRQ reads that data on a schedule through the CTD API. No extra sensors or manual exports.
DeRISK combines it with threat intelligence and each facility’s business data.
DeRISK simulates how likely (frequency) and how severe (magnitude) cyber incidents could be, and reports the results in dollars.
What you get together
Risk in financial terms.
Expected annual loss and loss at higher confidence levels, by facility and company.
Vulnerabilities ranked by dollar impact.
Fix the ones that drive the most loss, not just the highest CVSS scores.
Projects compared before you spend.
Test mitigation options and see the risk reduction of each.
Requirements
- Claroty CTD deployed on-premises
- A read-only CTD API account for DeRISK
- For automatic collection, a network path from DeRISK to CTD (not needed for manual JSON import)
- A DeRISK CRQ subscription at Evidence-Grade or Engineering-Grade, as each grade becomes available
Proof
A leading global manufacturer with 150+ facilities, 2 plants assessed.
With Claroty CTD and DeRISK CRQ v5, it found that one plant carried about 8 times the expected annual loss of the other, despite lower revenue. More than 60% of that loss came from exploitation of remote services. A network monitoring and incident response project cut the other plant’s 95th-percentile Value at Risk by ~27%.
About Claroty CTD
CTD was created to help both IT and OT teams overcome challenges associated with digital transformation and a converged IT/OT network environment. As the foundation of The Claroty Platform’s comprehensive industrial cybersecurity capabilities, CTD is backed by an unmatched library of industrial protocols, three unique asset discovery methods, proprietary DPI and virtual segmentation technology, and the renowned Claroty research group, Team82.
This solution empowers customers to reveal and protect their XIoT assets, detect and respond to the earliest indicators of threats, and seamlessly extend their existing enterprise security and risk infrastructure and programs to harden their industrial networks. CTD extends the same controls IT security teams use to minimize risk in IT environments to OT environments.
About Claroty
Claroty empowers industrial, healthcare, commercial, and public sector organizations to secure all cyber physical systems in their environments: the Extended Internet of Things (XIoT). The company’s unified platform integrates with customers’ existing infrastructure to provide a full range of controls for visibility, risk and vulnerability management, network protection, threat detection, and secure remote access.
Backed by the world’s largest investment firms and industrial automation vendors, Claroty is deployed by hundreds of organizations at thousands of sites globally. The company is headquartered in New York City and has a presence in Europe, Asia-Pacific, and Latin America.
For more information, visit claroty.com or email contact@claroty.com.