About Phosphorus Cybersecurity
Phosphorus Cybersecurity sells security for xIoT cyber-physical devices that covers discovering, hardening, monitoring and remediating those devices, with automated controls and zero-touch deployment. Phosphorus Cybersecurity operates as Phosphorus, A Dragos Company. Phosphorus, a Dragos company, describes its product as an extended Security of Things platform designed to find, fix and monitor the often unmonitored Things of the enterprise xIoT environment. Phosphorus Cybersecurity is based in Nashville. Brian Contos is the chief security officer of Phosphorus Cybersecurity.[2][3]
Phosphorus refers to the broader Internet of Things as the xIoT. Phosphorus describes such devices as purpose built IoT, OT and network devices running network-connected firmware, where endpoint security controls cannot be installed. Phosphorus research has focused on devices and technologies used by businesses and government, such as printers, voice over IP phones and physical access systems. A study of IoT device security by Phosphorus Labs found that 68% of the devices have high-risk or critical vulnerabilities. Phosphorus states that attackers exploit unmanaged, high-risk devices as entry points into critical operations. Phosphorus states that about 70% of xIoT devices still use default manufacturer credentials. Phosphorus states that about 68% of xIoT devices run vulnerable or outdated firmware. Phosphorus states that about one-quarter of xIoT devices are end-of-life.[2][3][7][8]
Phosphorus discovers and profiles devices with contextual detail across a wide range of device attributes. Phosphorus identifies, classifies and prioritizes vulnerabilities across an xIoT estate. Phosphorus discovers and remotely disables devices prohibited under U.S.NDAA Section 889, including Huawei, Dahua, Hikvision, ZTE and Hytera devices and devices using their OEM firmware regardless of manufacturer.[2]
Phosphorus automatically remediates xIoT device vulnerabilities, including credentials, firmware, certificates and risky configurations. Phosphorus manages and renews certificates across diverse device sets.[2]
Phosphorus continuously monitors and manages xIoT devices and detects and responds to device drift. Phosphorus monitors xIoT estates to detect and alert on device drift and operational changes. Phosphorus provides centralized log collection and analytics for device-level security analysis, anomaly detection, triage and forensics.[2]
Phosphorus integrates with ServiceNow to provide an automated framework for visibility and control. Phosphorus integrates with password management solutions such as CyberArk for automated xIoT credential management. Phosphorus integrates with Axonius to provide a view of xIoT asset details. Phosphorus integrates with Microsoft Sentinel to provide device enrichments and security insights.[2]
Phosphorus Cybersecurity offers xIoT security for financial services. Phosphorus Cybersecurity secures IoT, OT and IoMT devices for healthcare security. Phosphorus Cybersecurity offers a unified xIoT security management platform for OT, ICS and IIoT cyber-physical systems. Phosphorus Cybersecurity offers end-to-end xIoT security for modern data centers.[2]
Phosphorus Cybersecurity powers the IoT Security Podcast, which covers securing the extended internet of things. Brian Contos and John Vecchi host the IoT Security Podcast.[2][5][6][9]
Phosphorus Cybersecurity on the record