All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Claroty sells industrial, healthcare, public sector and commercial organizations the Claroty Platform, software that protects networked equipment such as industrial control systems and medical devices. Founded in 2015, Claroty reports more than 1,300 customers, including 24 of the Fortune 100, and names Pfizer, BHP and Standard Industries among them. Golub Growth led Claroty’s $150 million Series F in 2026. SecurityWeek puts total funding near $900 million, and CTech near $700 million in equity and credit. CTech reports that Claroty employs about 750 people. The platform enforces network policies through a customer’s own firewalls and switches and integrates with the customer’s security monitoring tools. Those integrations can add work to replacing Claroty.
| Description | Cyber-physical systems protection company whose platform gives industrial, healthcare, public sector, and commercial operators asset visibility, exposure management, network protection, secure access, and threat detection across operational technology and the Extended Internet of Things. | [f1] |
|---|---|---|
| Founded | 2015 | [f2] |
| HQ | New York City, United States | [f3] |
| Funding | $900M total | [f4] |
| Subsidiaries | Claroty Public Sector LLC (Subsidiary formed in 2026 to handle U.S. federal, state and local government work, headquartered in Arlington, Virginia.) | |
| Latest funding | Series F, $150M (January 2026) | [f3] |
| Product | What it does |
|---|---|
| Claroty xDome | Cloud-based SaaS platform with asset inventory, exposure management, network protection, and threat detection for industrial and commercial cyber-physical systems. |
| Claroty Continuous Threat Detection (CTD) | On-premise platform delivering deep asset visibility, network monitoring, and threat detection for operational technology and industrial control system environments. |
| Claroty xDome Secure Access | Controls and supervises third-party and remote privileged access to cyber-physical systems, balancing frictionless access with policy enforcement and compliance. |
| Claroty xDome for Healthcare | Medical device and connected-care security platform that discovers and protects clinical and IoMT assets across hospital networks. |
| Claroty Claire | AI security agent that Claroty launched in 2026 to prioritize CPS exposures, orchestrate remediation, and map assets to regulatory frameworks inside the Claroty Platform. |
Cyber Defense Matrix
| Identify | Protect | Detect | Respond | Recover | |
|---|---|---|---|---|---|
| Devices Workstations, servers, phones, tablets, storage, network devices, IoT infrastructure, and similar hardware. | |||||
| Applications Software, interactions, and application flows on the devices. | |||||
| Networks Connections and traffic flowing among devices and apps, plus communication paths. | |||||
| Data Content at rest, in transit, or in use across devices, apps, and networks. | |||||
| Users The people using the devices, apps, networks, and data. |
Claroty xDome and Continuous Threat Detection inventory cyber-physical assets and monitor industrial networks, and xDome Secure Access supervises remote access to operational-technology and XIoT systems. These lines are mapped to the Cyber Defense Matrix. [f1]
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 | Claroty names a specific buyer, operators of industrial, healthcare, public sector and commercial cyber-physical systems, and SecurityBrief relays Gartner’s view that attackers increasingly target organisations where these systems are widespread. CISA advisories crediting Team82 document concrete control-system flaws. The cited non-vendor sources describe the problem without quantifying the buyer’s pain. [s6, s7, s25, s14] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 3/5 | Claroty documents concrete mechanisms, including network policies enforced through existing firewalls, switches and NAC tools, SIEM, SOAR and EDR integrations, and xDome data collection through Claroty Edge and active queries. SecurityBrief reports a second Gartner Leader placement, while the Forrester Leader placement and the KLAS score from 35 healthcare organizations come from Claroty’s own releases. No independent technical evaluation of those mechanisms is cited. [s1, s20, s7, s33, s23] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 | One buyer-side signal kind falls within the last year, the 2026 Gartner Magic Quadrant that SecurityBrief reported in March 2026 as describing a growing market. The FedRAMP Marketplace lists xDome for Government on the agency path as of February 2026, and GovCon Wire reported that reaching it required a sponsoring federal agency. That status is an authorization step still in process rather than a documented purchase or mandate, so the record shows one independent demand kind rather than two. [s7, s15, s18] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 4/5 | Team82 has a sustained disclosure record that CISA credits independently, naming its researchers on a Rockwell Automation advisory and a later EnOcean advisory. Claroty’s leadership page adds that co-founder Amir Zilberstein previously co-founded Waterfall Security Solutions, a critical-infrastructure gateway maker, and that chief executive Yaniv Vardi led Panoramic Power before its acquisition by Centrica. [s14, s25, s5, s2] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 4/5 | Claroty names customers including Pfizer, BHP and Standard Industries on its homepage and reports more than 1,300 customers, including 24 of the Fortune 100, and SecurityBrief reports two consecutive Gartner Leader placements. Claroty itself is the source of its revenue scale, including the hundreds of millions in revenue its chief executive cited to CTech. No cited third party reports that scale independently of Claroty’s statements. [s26, s19, s7, s9, s10] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 3/5 | Claroty raised a $150 million Series F led by Golub Growth, with SecurityWeek putting total funding near $900 million and CTech citing about $700 million in equity and credit. Its chief executive told CTech that revenue reached the hundreds of millions and that profitability is expected in the near term, so shipping is visible while Claroty does not disclose margins or cash burn. [s8, s9, s10, s3] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 4/5 | SecurityBrief reports Claroty’s second consecutive Gartner Leader placement for cyber-physical systems protection, and Claroty relays a Forrester Leader placement in operational technology security and a KLAS Top Performer rating in healthcare IoT security. Those placements show a clear category fit, and no cited source names Claroty as the definer of its category. [s7, s26, s33, s23] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 | Claroty documents integration friction a platform vendor could need to match, with recommended policies enforced through the customer’s firewalls, switches and NAC tools and integrations with SIEM, SOAR and EDR tools. Its CPS language model draws on information from more than 6,500 device manufacturers across 20,000-plus sites, and no cited source describes these as a barrier that bundling could not eventually replicate. [s1, s19, s26] |
Claroty sells to operators of cyber-physical systems, the machinery, control equipment and connected devices that industrial, healthcare, public sector and commercial organizations run. Claroty groups those assets as the Extended Internet of Things and says its platform secures all of them in a customer’s environment.
The problem has support outside the company. SecurityBrief reports that manufacturers, utilities, transport operators and healthcare providers have connected operational technology to enterprise networks, which increased the need for asset visibility, remote access controls and monitoring. SecurityBrief also relays Gartner’s view that the market is growing as attackers target organisations where these systems are widespread.
CISA advisories document the exposure in specific products. One advisory credits a Team82 researcher with reporting a flaw to Rockwell Automation. Another credits Team82 with vulnerability reports and recommends keeping control system devices off the internet. [s6, s7, s25, s14]
The Claroty Platform combines asset visibility, exposure management, network protection, secure access and threat detection. Customers run it as the Claroty xDome SaaS service or as the on-premise Continuous Threat Detection product, and Claroty xDome Secure Access handles remote connections into these environments.
The documented mechanisms are specific. Claroty says the platform recommends network policies from what it sees and enforces them through the customer’s existing firewalls, switches or NAC tools, and that the platform integrates with SIEM, SOAR and EDR tools. In 2026 Claroty added Visibility Orchestration to xDome, which scores how completely each asset is profiled and gathers more data through Claroty Edge, active queries and EDR integrations.
Claroty also launched Claire, an AI security agent it describes as powered by a CPS language model built from information on more than 6,500 device manufacturers. The healthcare edition of xDome enriches device profiles using knowledge of hundreds of device protocols. It discovers devices through passive monitoring and safe queries. [s1, s3, s16, s7, s20, s19, s27]
Claroty competes in the cyber-physical systems protection category that Gartner evaluates. SecurityBrief reports that Gartner named Claroty a Leader in that category for a second consecutive year, and Claroty’s homepage states that Forrester named it a Leader and a Customer Favorite in its Q3 2026 operational technology security evaluation of 11 vendors.
Claroty positions breadth as its answer to point products. On its platform page, Claroty argues that one platform replaces separate remote access, vulnerability management and threat detection tools, and SecurityBrief reports that Claroty also sells xDome Secure Access for remote connectivity into these environments.
As an analysis judgment, broad IT security vendors could add asset inventory for these systems to products customers already hold. A vendor taking that route could still need to match the integrations Claroty documents, with policies enforced through the customer’s network equipment and integrations with security operations tools. [s1, s7, s26, s33, s16]
Claroty reports more than 1,300 customers, including 24 of the Fortune 100. Its homepage quotes Pfizer, BHP and Standard Industries executives describing their use of the platform, and Claroty presents a case study on Ohio State University Wexner Medical Center.
Claroty relays customer review figures as further scale signals. In one release it reports a Gartner Peer Insights rating of 4.9 from 149 reviews as of June 2026, and in another a KLAS score of 92.5 from 35 healthcare organizations. SecurityBrief independently reports the second Gartner Leader placement.
Claroty itself is the source of the revenue figures. CTech reported Claroty’s disclosure that it surpassed $100 million in annual recurring revenue during 2023. When Claroty announced its Series F, its chief executive told CTech that revenue had reached the hundreds of millions of dollars.
Claroty raised a $150 million Series F led by Golub Growth in January 2026. SecurityWeek puts total funding at roughly $900 million, while CTech reports about $700 million raised through equity and credit. [s19, s26, s3, s9, s10, s22, s23, s7, s8]
Claroty’s leadership page describes co-founder Amir Zilberstein as a pioneer in the OT security market who previously co-founded Waterfall Security Solutions, a maker of security gateways for critical infrastructure, and as the author of more than ten patents. The same page lists him as a director.
The company runs under chief executive Yaniv Vardi, who led Panoramic Power before Centrica acquired it. The leadership page also lists James Love as chief revenue officer and Gil Gur Arie as chief product officer, and NightDragon founder Dave DeWalt chairs the board.
Team82, Claroty’s research group, gives the team an externally credited record. CISA named Team82 researchers for reporting vulnerabilities to Rockwell Automation and CISA, and Team82 publishes its coordinated disclosure policy and free research tools. [s5, s14, s25, s2]
Claroty’s Trust Center lists SOC 2 Type 2, ISO 27001, ISO 27701, the German BSI C5 cloud catalog and CSA STAR participation, and it releases audit reports under NDA. These disclosures support enterprise security reviews.
Claroty has expanded its government credentials. It formed Claroty Public Sector LLC to handle all U.S. public sector work while it pursues foreign ownership mitigation, and the FedRAMP Marketplace lists xDome for Government at Agency Authorization In Process in the High class. GovCon Wire reports that the Defense Logistics Agency granted Claroty an authority to operate, and Claroty Public Sector has announced CJIS compliance.
NVD records an OIDC authentication flaw in Claroty Secure Access 3.3.0 through 4.0.2 that an attacker could exploit to create or impersonate users. [s4, s15, s17, s18, s29, s12, s13]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| Nozomi Networks | competes with | ||
| Dragos | competes with | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. | |
| Armis | competes with | N/AWe captured the evidence for these companies under different evidence-model versions (v1 vs v2), so the totals were scored under different conditions and are not directly comparable. | |
| Cyolo | competes with | ||
| Xona | competes with | ||
| Dispel | competes with |
Add analyzed competitors to compare them side by side with Claroty.
A closer look at the company's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
press the advantage
Claroty’s documented durability includes integration inside customer networks and accumulated device data. The platform enforces network policies through customers’ network equipment and integrates with security operations tools. These integrations can add work to replacing Claroty. GovCon Wire reports a Defense Logistics Agency authority to operate for Claroty, while the FedRAMP High listing for xDome for Government remains in process. Claroty builds its AI features on a language model for industrial equipment and medical devices it describes as drawing on more than 6,500 device manufacturers across more than 20,000 sites.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 | Claroty sells platform software that the customer’s team deploys and operates, whether as the xDome service or on-premise Continuous Threat Detection, and the customer owns the outcomes. Claroty says Claire agents will coordinate remediation and automate regulatory mapping. Visibility Orchestration recommends tasks to fill gaps in device information. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | Replacing Claroty can involve reworking policies enforced through the customer’s firewalls, switches and NAC tools, integrations with SIEM, SOAR and EDR tools, and asset data exchanged with systems such as Accruent. That is meaningful integration friction, and the cited record documents the mechanisms without sizing the migration. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 2/3 | Claroty’s CJIS announcement says the Claroty xDome for Government platform is now compliant with the FBI’s Criminal Justice Information Services Security Policy, so a replacement for that government deployment would need its own CJIS validation. GovCon Wire also reports a Defense Logistics Agency authority to operate, though no cited source names the product it covers. SOC 2, ISO 27001, ISO 27701 and C5 are attestations a funded rival can also obtain, and the FedRAMP High listing remains in process. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 | Claroty profiles devices through passive monitoring and safe queries using knowledge of hundreds of device protocols, detects threats in live control networks, and builds a CPS language model from information on more than 6,500 device manufacturers. CISA credits Team82 researchers with vulnerability reports. Claroty says its language model incorporates more than a decade of industry expertise. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 3/3 | Claroty’s buyers include regulated enterprises and governments. It reports 24 of the Fortune 100 among its customers, GovCon Wire reports a Defense Logistics Agency authority to operate, and KLAS based its rating on evaluations by 35 healthcare organizations. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 2/3 | Claroty xDome and Continuous Threat Detection are platforms for asset visibility, exposure management and secure access. They integrate with security operations tools, while Claroty’s healthcare offering exchanges device data with asset management systems. Other applications consume that data, and no cited source describes them depending on Claroty to run. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 2/3 | Claroty describes its language model as covering devices from more than 6,500 manufacturers across more than 20,000 sites. Forrester’s profile, quoted by Claroty, describes risk scoring benchmarked against similar customers. No cited source describes that data as public, while Team82’s published vulnerability disclosures are public and are not counted as the retained asset. |
Claroty sells to organizations that run cyber-physical systems in four settings it names, industrial, healthcare, public sector and commercial. It reports more than 1,300 customers, including 24 of the Fortune 100.
Healthcare is a distinct segment with its own product. Claroty completed its acquisition of the healthcare IoT security company Medigate, and it sells xDome for Healthcare for clinical and building systems from IV pumps to smart HVAC. Claroty reports that KLAS scored it 92.5 out of 100 from evaluations by 35 healthcare organizations.
The public sector now has its own entity. Claroty formed Claroty Public Sector LLC to handle all U.S. federal, state and local government work while it pursues foreign ownership mitigation, and that subsidiary is headquartered in Arlington, Virginia.
The Claroty Platform combines asset visibility, exposure management, network protection, secure access and threat detection. Customers deploy it as the Claroty xDome SaaS service or as the on-premise Continuous Threat Detection product, and Claroty’s company page highlights its protocol coverage for industrial control systems.
Claroty documents how the platform acts on what it discovers. The platform recommends network policies and enforces them through the customer’s firewalls, switches or NAC tools. Claroty added Visibility Orchestration to xDome in 2026 to score how completely each asset is profiled. xDome gathers more data through Claroty Edge, active queries and EDR integrations.
Claroty builds its AI features on accumulated device data. Claroty describes its Claire agent as powered by a CPS language model with information on more than 6,500 device manufacturers across more than 20,000 sites. In its release on the Forrester placement, Claroty quotes the report describing risk scoring benchmarked against similar customers.
Claroty’s revenue organization is led by chief revenue officer James Love. Its homepage quotes Pfizer, BHP and Standard Industries executives on their use of the platform, and Claroty reports working with 24 of the Fortune 100.
Third parties have also recognized Claroty. SecurityBrief reports a second consecutive Gartner Magic Quadrant Leader placement, and Claroty relays a Forrester Leader and Customer Favorite placement, a Gartner Peer Insights rating of 4.9 from 149 reviews, and a KLAS Top Performer rating in healthcare IoT security.
Claroty itself is the source of the revenue figures. CTech reported Claroty’s disclosure that it passed $100 million in annual recurring revenue during 2023, and its chief executive later told CTech that revenue reached the hundreds of millions. Reported funding totals differ, with SecurityWeek citing roughly $900 million and CTech about $700 million in equity and credit.
On its platform page, Claroty says the platform lowers total cost of ownership by replacing separate remote access, vulnerability management and threat detection tools with one platform.
The captured Claroty pages contain no list prices or billing unit. In its release on the Forrester placement, Claroty quotes the report saying Claroty recently made its pricing models more flexible to meet customers’ needs.
Claroty delivers the platform in two forms. Claroty xDome runs as a modular SaaS service, and Continuous Threat Detection runs on-premise, which Claroty says lets customers choose deployment by scalability, cost or compliance requirements.
Claroty says its Claroty Edge scans can run on infrastructure a customer already has, without added hardware. Its platform page also says teams can begin reducing risk within days using multiple discovery methods.
The government edition runs as a separate cloud offering. The FedRAMP Marketplace describes xDome for Government as a SaaS offering in the High class.
Claroty’s Trust Center lists SOC 2 Type 2, ISO 27001, ISO 27701, the German BSI C5 cloud catalog and CSA STAR participation, and it releases audit reports and penetration test documents under NDA.
Claroty also holds or is pursuing government authorizations. The FedRAMP Marketplace lists xDome for Government at Agency Authorization In Process in the High class, and GovCon Wire reports that the Defense Logistics Agency granted Claroty an authority to operate through its Enterprise Mission Assurance Support Service. Claroty Public Sector has also announced CJIS compliance.
NVD records an OIDC authentication flaw in Claroty Secure Access 3.3.0 through 4.0.2.
Claroty connects its platform to the security and network tools customers already run. The platform integrates with SIEM, SOAR and EDR tools, enforces policies through existing firewalls, switches and NAC products, and triggers EDR, cloud and SNMP integrations from within xDome.
Claroty also reports technology alliances. It reports an AWS Manufacturing and Industrial Competency for OT security and a collaboration with Google Security Operations, and Claroty’s site describes integrations that exchange device data with asset management systems such as Accruent and Nuvolo. Claroty documents these integrations without sizing what a departing customer would have to rebuild.
According to CTech, Claroty began in 2015 as the Israeli venture group Team8’s first venture. Its leadership page describes co-founder Amir Zilberstein, now a director, as a pioneer in OT security who previously co-founded Waterfall Security Solutions and wrote more than ten patents.
A hired executive team runs the company. Chief executive Yaniv Vardi led Panoramic Power before Centrica acquired it, Gil Gur Arie leads product, James Love leads revenue, and NightDragon founder Dave DeWalt chairs the board.
Team82 gives Claroty a research record that outside agencies credit. CISA named Team82 researchers for reporting vulnerabilities to Rockwell Automation and CISA, and Team82 publishes free research tools for defenders.
| Id | Source | Tier | Accessed |
|---|---|---|---|
| f1 | The Claroty Platform | official | 2026-06-21 |
| f2 | Aster on why it invested in Claroty | press | 2026-06-21 |
| f3 | Claroty Series F press release, January 22, 2026 | official | 2026-09-17 |
| f4 | SecurityWeek: Claroty Raises $150 Million in Series F Funding | press | 2026-09-17 |
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.