For those of you who are implementing OT Security, which is the tool you are using in order to get the inventory and asset management for the industrial environment?

We use Claroty xDome for the OT assets inventory (not only), which is integrated with ServiceNow as CMDB backend.

I suggest looking at Armis as they are known for their strength in OT security.  We've been using it primarily for traditional assets and IoT devices with fantastic results! Inventory and asset management have been a breeze, and their customer service is truly top-notch.

We've found it incredibly effective for our needs. Here's why:

Inventory & Asset Management:

Agentless discovery: Forget about manually installing agents on every device. Armis identifies and maps everything on your network, from servers and desktops to printers and industrial sensors, without impacting critical operations.

Deep visibility: You get a real-time, detailed picture of each device, including its manufacturer, model, firmware version, vulnerabilities, and even potential misconfigurations. This level of granular detail is crucial for effective asset management.

Risk assessment & prioritization: Armis analyzes device behavior and vulnerabilities to prioritize which assets need your attention first, making your security efforts more efficient. There are also seemingly endless integrations with other tools like Tenable, ServiceNow, CrowdStrike, etc.

Customer Service:

Armis customer support has been outstanding. They're incredibly responsive, knowledgeable, and proactive in helping us get the most out of the platform. Their expertise in various security areas adds significant value.

Things to consider:

Cost: Armis may be more expensive than some simpler asset management solutions. However, the depth of visibility and risk assessment it provides can more than justify the cost.

Complexity: The initial setup and configuration can be involved, especially for organizations with limited security expertise. But Armis offers comprehensive training and support to get you up and running.

Overall:

If you're looking for a powerful and comprehensive solution for inventory, asset management, and even some level of security monitoring for both traditional and IoT devices, Armis is definitely worth considering. While it excels in OT, its capabilities extend far beyond and can bring significant value to your broader security posture.

Please note: These are my personal views based on our experience with Armis and should not be considered a formal organizational endorsement or recommendation.