Claroty Platform Reviews

We use it for asset inventory, vulnerability management for our OT devices, and network monitoring for our factories.

Claroty provides continuous threat protection and identifies pre-empty stuff and false positives. So far, we haven't had any intrusions. However, we have used the solution to mitigate this. 

First, the graphical user interface is quite poor. It's 2024, and we still have to export data to Excel to make use of it. The solution could have a better graphical or user interface.

Second, their active queries need substantial improvement. The current system lacks efficiency and the ability to communicate with and gather information from multiple systems.

Third, the reporting capabilities for vulnerability management require significant enhancement. Better reporting tools and improved ways to create reports are essential for usability. The current method of report creation does not align with how we need to use the tool.

The tool cannot exclude a specific factory line from the sensors while implementing new work to avoid false positives. After the implementation, I would like to return that line to training mode to learn any new configurations or changes. This would allow the system to create a new baseline for those assets. However, that functionality is not available right now.

I have been using Claroty Platform for two years. We are using V5.0 of the solution.

I rate its stability an eight out of ten.

We have deployed over 270 sensors. 60 people are working on this solution.

I rate its scalability a seven out of ten.

Since we were still in the deployment stage, it wasn't crucial from an operational point of view, but we had stability issues with the CTDs going down and similar problems. However, Claroty support addressed these issues quite well.

Positive

Deploying thirty-plus sites takes around five months. Eight people were involved in networking and other tasks.

I rate the setup process as three without training, but with training and some help from Claroty or any integrator, I rate it as seven or eight out of ten.

Our main challenge was that the integrator was not on par. It was more about the difficulty of doing it on your own. If you get help from an integrator or Claroty, it can be much smoother. For example, in our case, I worked with a Claroty engineer to onboard one of our sites. Afterward, I created all the necessary materials, SOPs, and documentation for our engineers to handle the rest of the sites in-house.

I have implemented preemptive mitigations for various issues, such as open SMB version one port in our network, which was identified using the Claroty Platform. I then proceeded to close these vulnerabilities and other similar issues.

For maintenance, two or three people were required.

Overall, I rate the solution a seven out of ten.

I believe the two main aspects where Claroty stands out are their ability to provide a complete platform and their OT-specific focus. They offer threat detection, asset management, vulnerability management, and remote access, which makes them the sole vendor in the OT security space to offer all three services. This is a significant advantage for them. Additionally, their network mapping capabilities are impressive, as they allow users to view a full map of all communications within a site or factory. This feature is highly valued by many of our customers.

I think the only issue is that the hardware Claroty uses is expensive. I know they are working on developing cheaper hardware, but that's still a work in progress.

I have used the solution for two years. However, I worked at Claroty, so while I know the product by heart, I was not a customer. I was on the vendor side.

I think the customer service is good. I have always found Claroty's technical support to have good engineers. The service differs by location due to their global customer base, with some places being more challenging. Overall, I think they provide good service. I haven't used them as a customer, as they were my peers, so it's hard to judge completely.

Positive

Claroty's pricing is highly competitive. I cannot discuss details, but I am aware of the pricing strategies of other platforms in this space. One unique aspect of Claroty is that users get all the deployments for free. These projects can be comprehensive and complex, often requiring hardware deployment, which takes time. Other vendors charge for technical account management and support hours during deployment, but Claroty provides these services for free, offering significant value.

I would give it a nine out of ten. Nobody is perfect, but I think Claroty is a very good platform. I have been advising in this space, and I am frequently asked if I recommend them. My answer is definitely yes.

I use the Claroty Platform to analyze data in industrial environments, especially for operational technologies in manufacturing.

I like how the tool does passive and active discovery and threat detection and shows risks, recommendations, and vulnerabilities. It gives risk scores and gathers everything in one place - IP, device name, etc. We can integrate it with other tools for overall network mapping. It's useful for audits, compliance, and monitoring of all devices in the industry. It provides both monitoring and control. We also have SRA for incident response, which lets us search all alerts if we deploy the Claroty Platform.

For improvement, I think the training could be more practical. We have external training, but they're mostly theoretical. I want the solution to provide hands-on lab experience to help users learn better.

As a user or administrator, it's easy to use. However, documentation is a bit lacking for deploying the collection server or spanning and trafficking. We need clearer guidelines on what to do first, second, and so on.

The two points for improvement are more lab-oriented, practical training, and better documentation for implementing the tool. Even though the support is very good and they explain everything, having clearer documentation would be helpful.

I have been using the product for a year. 

The tool is very stable and useful for monitoring industrial environments.

In my team, about five to six people use the Claroty Platform, and including clients, it ranges from five to ten people.

I've contacted the support team, and they've been very helpful. They assist with troubleshooting and solving issues, even joining meetings to help us understand things better.

Our company chose Claroty Platform because it provides everything needed for auditing, assessment, tool-based assessment, integration, and deployment. It might be challenging for smaller companies due to financial reasons. But it offers great integration, extendibility, and visualization. We can do custom reporting and have access control. It provides a complete factory involvement experience, including network traffic analysis, deep package inspection, and protocol support. We can see which ports are open, protocols are working, device types, and vendors - everything under one roof.

If someone asked me whether to use the tool, I'd first check if their environment is IT or OT. It is tailored for OT environments, which is its best advantage. It offers OT-specific threat intelligence, comprehensive visibility of IT and IoT assets, too, and detailed network mapping. It helps understand potential vulnerabilities and improve overall security posture.

Claroty Platform has advanced threat detection, behavioral and anomaly detection, and industrial protocol support. It also provides risk and vulnerability management with proper scoring and Secure Remote Access for monitoring remote workers or third-party vendors. We can connect it with Azure SSO for just-in-time admin access and use identity providers for user management.

I rate the overall solution an eight out of ten. 

Our company has designed a project with Claroty Platform being used for the cybersecurity audit. Suppose our company needs to collect information about the systems in Indian Oil, HPCL, or other oil refineries. In that case, we collect the data and gather the information to look at the vulnerabilities, see how the firmware and networks look, and look at the protocols used in a particular environment. Our company gathers the aforementioned type of information with the help of Claroty Platform.

The most valuable feature of the solution stems from its visibility section since, within a very short amount of time, the tool provides visibility for users to see the devices that are connected to the systems in an environment and to see how the communication is going on while keeping a tab over other areas like alerts and insights, which can be useful for the system.

The product fulfills our company's needs. Currently, Claroty Platform focuses on industrial control systems and OT. If Claroty Platform expands to the IT network side, it will benefit Claroty and those who want the tool for their IT network part.

Information related to zero-day attacks, which are difficult to detect in a system, is an area of concern that needs to be improved over time by the Claroty Platform. Sometimes, the weaknesses in certain systems cannot be captured by Claroty Platform because it lacks knowledge about zero-day attacks.

The product's integration capabilities are an area of concern where improvements are required.

I have been using Claroty Platform for two to three years. My company is in partnership with Claroty Platform.

Stability-wise, I rate the solution a seven out of ten.

With the Claroty Platform in place, at times, my company is not able to connect some of the data with some other systems, which don't actively communicate with another system. Claroty Platform can't detect systems that don't actively communicate with other systems, so we have to use active queries. However, in passive detection, one can't detect systems. There needs to be some improvements in the product.

When it comes to scalability, the tool performs well in some areas, while it doesn't perform well enough in certain other areas. Scalability-wise, I rate the solution an eight out of ten.

As my company has a partnership with Claroty Platform, the seniors in my organization communicate with Claroty's support team if required.

The data is private, and we have to keep it on our company's server, so the solution is deployed on an on-premises model.

The solution is deployed for one day in our company within three to four hours to get the data and create a report consisting of the details of the vulnerabilities and what needs to be improved in the systems. In short, my company has not implemented the product on a timely basis. It is generally implemented for a day, together with the data, to analyze the data and for another communication part.

Tenable has also been expanding its OT security technology, so we can't compare Claroty Platform with it to decide on which would be the best tool for our company.

In terms of the product's ability to enhance cybersecurity in our company, I would say that I have three technical certificates of Claroty, including technical support and Claroty implementation certificates. Claroty Platform provides courses through its partner portal, from which others can learn about the tool and its implementation process.

The product helps mitigate potential threats, especially if its users have signature rules. The product also provides alerts.

My company is able to integrate the Claroty Platform with another product to get data from it. Claroty Platform's integration capabilities have some limitations since it can only be integrated with a limited number of systems. A tool like Tenable offers good integration and can be integrated with many external products, like SIEM, SOAR, or firewall products.

I recommend the product to those who plan to use it. My company also suggests our customers deploy the Claroty Platform.

Claroty Platform is a product that focuses on industrial control systems, and if people want to save their company's OT systems and cater to the needs related to the security area, then they can use the product.

I rate the overall tool an eight out of ten.

The main customers want visibility on their security devices. The first target is to implement the solution to give any panelist access to our and the customer's infrastructure.

Claroty is a good platform for increased business in network solutions.

Pricing could be improved.

I have been using Claroty Platform for two years.

The product is stable.

I rate the solution’s stability an eight out of ten.

One person is using this solution. We develop and install the product at the customer's site. Four people work with the solution.

The initial setup is very easy and takes two hours to complete. We are a group of five people deploying it.

I rate the product’s pricing a six out of ten, where one is cheap, and ten is expensive.

I'm doing the maintenance. I recommend the solution. 

Overall, I rate the solution a seven out of ten.

Our primary use case for the solution is to manage and monitor our enterprise-level IT infrastructure. We operate within a hybrid environment that includes both on-premise and cloud-based resources. The solution helps us with real-time monitoring, incident management, and performance analytics across our entire network.

The platform improved our organization's operational efficiency by providing proactive monitoring and quick resolution of issues. It has reduced our downtime and improved the reliability of our IT services. Our insights from its analytics capabilities have also informed better decision-making regarding our infrastructure investments.

The most valuable features include the real-time monitoring dashboard, which allows us to track system performance continuously, and the alerting system, which notifies us immediately of any potential issues. These features are crucial because they help us maintain high availability and reduce response times.

The product could be improved in terms of user interface design. While functional, the interface could be more intuitive and user-friendly, especially for new users who might find it somewhat complex initially.

We would appreciate enhanced integration capabilities with third-party applications and more advanced analytics features, such as predictive analytics, that can forecast potential system failures before they occur.

We have been using Claroty Platform for approximately two years.

In our experience, the platform has proven very stable, with minimal downtime and consistent performance even under high-stress conditions.

The product allows us to expand our monitoring capabilities as our infrastructure grows seamlessly. It handles increased loads without any noticeable degradation in performance.

The support has generally been excellent, though there is always room for improvement in response times and resolution efficiency.

Positive

We previously used a different monitoring tool. Still, we switched to this solution because of its superior scalability and the breadth of its features, which more closely align with our growing organizational needs.

The initial setup was complex because we needed to integrate it with various components of our existing infrastructure. However, the vendor's detailed documentation and our in-house team's expertise helped streamline the process.

We implemented the platform with the help of our in-house team. We did consult with the vendor's support team for certain aspects of the setup.

The solution offers comprehensive tools that greatly enhance your IT operations if implemented correctly. I recommend dedicating sufficient time to training your team on its use to leverage its capabilities fully.

I rate it an eight out of ten. 

It's a very good solution for what it promises.

The main improvement has been in continuous threat detection. So far, it's been a good experience with network monitoring capabilities.

It's mostly utilized for asset discovery and secure remote connection.

The main advantage of Claroty, when compared to its competitors, is Integrated secure remote access.

The knowledge of the threat landscape is pretty good. That's the only area that customers are concerned with once a solution is implemented. So, Claroty has a good team and a good way to update its installed base.

Claroty Platform could improve the pricing to get more acceptability in the market.

I have been using it for less than a year. 

We haven't had a lot of need for support yet, but so far, it's been good.

Claroty has certain benefits, especially in integrated secure remote access, but for general applications, Nozomi could be a good alternative.

It's more of an insurance against vulnerabilities and threats.

It's quite expensive compared to other options.

Overall, I would rate the product a seven out of ten. It is very good.