- Claroty Public Sector GM Jen Sovada has outlined a platform for CPS risk visibility
- Sovada points to Claroty’s AI-driven asset inventory and risk scoring
- Claroty covers over 450 device protocols and protects 20 million assets globally
Jen Sovada, general manager of public sector at Claroty, said government agencies need a unified platform that could give them deep visibility and help them manage risks facing their cyber-physical systems, or CPS, in a rapidly evolving threat landscape.
In an article published on Carahsoft.com, Sovada, a previous Wash100 awardee, wrote that the blending of IT and operational technology, or OT, networks has broken down older security boundaries. She added that artificial intelligence is accelerating the way threat actors find and exploit vulnerabilities.
“Because patching is often constrained by the need for operational uptime and safety in CPS environments, the core security challenge shifts from simply finding vulnerabilities to managing and mitigating them at operational speed,” she explained. “It is essential to make a strategic shift toward focusing on zero trust principles and network segmentation to contain risk and prevent lateral threat movement.”
How Does Claroty’s Unified Platform Work?
According to Sovada, Claroty built a single platform to secure the extended Internet of Things, or XIoT, which spans OT, IoT, building management systems and the Internet of Medical Things. She explained that the platform is deployed across thousands of environments in more than 50 sectors and can run in the cloud or on premises.
Sovada wrote that the platform’s foundation is an AI-powered asset inventory. She said Claroty uses protocol-agnostic deep packet inspection along with several other discovery methods, including a hardware-free option called Claroty Edge, to identify each device’s make, firmware, model and communication language, even for protocols that standard scanners typically miss.
The Claroty executive added that the platform goes beyond standard vulnerability and exploit lists by evaluating how exploitable a flaw is and what operational impact it could have. She said this approach produces a mission-specific risk score that helps teams focus on the issues that matter most without disrupting critical processes.
How Does Claroty Protect Against Insider Threats?
Sovada said Claroty addresses insider risk through xDome Secure Access, a purpose-built platform that could give teams controlled, identity-aware access to sensitive OT systems. She noted that the tool monitors and records all activity and allows administrators to revoke live privileges when needed.
According to Sovada, Claroty has visibility into more than 450 device protocols for cyber-physical systems and protects more than 20 million assets worldwide. She wrote that the company’s in-house XIoT vulnerability and threat research group discloses hundreds of vulnerabilities each year and publishes research that the National Security Agency, the FBI and other organizations have cited.
