About Armis
Armis is a cybersecurity company that sells Armis Centrix, a platform of modular solutions that run from asset management to IoT security and ICS security. Armis says Armis Centrix monitors billions of assets to identify real-time risks. Armis describes Armis Centrix as a cloud-native platform that delivers real-time visibility and AI-powered risk mitigation across the attack surface. The modular solutions in Armis Centrix, including Vulnerability Prioritization and Remediation (VIPR), adapt to the customer's environment, according to Armis. Armis is now part of ServiceNow.[1][6][7][10]
Armis Centrix for Asset Management and Security is one of the solutions in the platform, with the stated aim to see every asset, understand the risk and secure what matters. Armis Centrix for OT/IoT Security is described by Armis as a way to secure the backbone of industry without disruption. Armis Centrix for Medical Device Security is aimed at protecting the entire patient journey in a digital world. Armis Centrix for VIPR-Pro covers prioritization and remediation, with the aim to close the gap between finding and fixing risk. Armis Centrix for Vulnerability Management Detection and Response aims to shift from reactive scanning to real-time, evidence-based vulnerability validation. Armis Centrix for Application Security aims to eliminate AppSec fragmentation and secure the entire software supply chain. Armis Centrix for Early Warning aims to move from reactive defense to proactive immunity.[6]
Armis describes discovering and contextualizing managed and unmanaged assets and creating real-time inventories without manual intervention by IT teams. Armis says it provides access to granular industrial control systems (ICS) and OT device details so teams can prioritize and act on risk-related insights. Armis says deep asset visibility with Armis Centrix collects information about each asset, including its characteristics, configurations, behavior, relationships and vulnerabilities. With non-intrusive active and holistic discovery, Armis Centrix exposes legacy software that current tooling is unable to detect and identifies the risks associated with it. Armis says its platform can passively and safely analyze traffic from industrial controllers and systems. Armis describes its approach as agentless, meaning no software is installed on production equipment. Armis says it identifies OT devices by manufacturer and model.[6][7]
Armis describes the Asset Intelligence Engine as a crowdsourced, cloud-based knowledge base that tracks over five billion assets and sits at the core of Armis Centrix. Each asset profile records how often the asset communicates with other devices and over what protocols. The Armis Asset Intelligence Engine tracks managed, unmanaged and IoT assets that Armis has seen across its customers. When an asset operates outside of its baseline, Armis Centrix issues an alert or can automatically disconnect or quarantine the asset. Alerts can be triggered by a policy violation, a misconfiguration or abnormal behavior.[8]
Armis Vulnerability Intelligence Database is an AI-powered vulnerability intelligence resource, available as a freely accessible database or through commercial API access on the AWS Marketplace. Armis describes a database that ingests and correlates data from sources including internal threat intelligence, external feeds, community contributions and Armis Labs. Armis says the database draws on external feeds like CISA KEV, NVD and vendor disclosures. The database is backed by the Armis Asset Intelligence Engine and Armis Labs. Armis says the database gives insight into vulnerabilities affecting IT, OT, IoT and medical devices.[9]
Armis says converged IT/OT environments must comply with standards including NERC, MITRE ATT&CK, ISA/IEC 62443, ISO 27001 and NIST SP 800-82 Rev. 2. With Armis Centrix, customizable dashlets map to evidence requirements outlined in security frameworks, and customizable reports enable cross team collaboration and board-level reporting. With Armis Centrix, users can display connections based on segments, asset types and defined boundaries. Armis says the Armis Asset Intelligence and Security Platform helps government agencies meet the requirements of BOD 23-02. Armis says financial institutions must be able to identify, classify and contextualize all connected devices in their environment. Armis addresses the Digital Operational Resilience Act (DORA), which was published on 27 December 2022.[10][11]
Armis says it offers flexible deployment options to meet the legal and regulatory requirements of the organization and region. Armis says metadata can be stored in the cloud or in a hybrid model to comply with laws like GDPR and other local data residency rules. United Airlines deployed Armis Centrix to build a real-time, categorized inventory of its OT estate, from process control assets to HVAC systems and bag scanners. Armis was deployed at 97 plants to improve operational resilience. A vertically integrated poultry processing facility faced asset sprawl and siloed OT infrastructure, and a team deploying Armis Centrix uncovered over 4,500 assets, more than 4x their original estimate. Armis describes a national utility with thousands of water treatment plants inherited from 31 different operators, working to comply with EU mandates.[6][7][10]
Armis on the record