Claroty Platform Reviews

I believe the two main aspects where Claroty stands out are their ability to provide a complete platform and their OT-specific focus. They offer threat detection, asset management, vulnerability management, and remote access, which makes them the sole vendor in the OT security space to offer all three services. This is a significant advantage for them. Additionally, their network mapping capabilities are impressive, as they allow users to view a full map of all communications within a site or factory. This feature is highly valued by many of our customers.

I think the only issue is that the hardware Claroty uses is expensive. I know they are working on developing cheaper hardware, but that's still a work in progress.

I have used the solution for two years. However, I worked at Claroty, so while I know the product by heart, I was not a customer. I was on the vendor side.

I think the customer service is good. I have always found Claroty's technical support to have good engineers. The service differs by location due to their global customer base, with some places being more challenging. Overall, I think they provide good service. I haven't used them as a customer, as they were my peers, so it's hard to judge completely.

Positive

Claroty's pricing is highly competitive. I cannot discuss details, but I am aware of the pricing strategies of other platforms in this space. One unique aspect of Claroty is that users get all the deployments for free. These projects can be comprehensive and complex, often requiring hardware deployment, which takes time. Other vendors charge for technical account management and support hours during deployment, but Claroty provides these services for free, offering significant value.

I would give it a nine out of ten. Nobody is perfect, but I think Claroty is a very good platform. I have been advising in this space, and I am frequently asked if I recommend them. My answer is definitely yes.

We use the solution to monitor the integrity and security level of events from the manufacturing flows in the OT or ICS environment. The main thing is to enhance the asset registry. Claroty has some capabilities, such as four types of asset collection modules that will enhance your asset registry or asset management.

The OT or ICS environment has control logic and air-gapped networks. People cannot collect information directly from each asset. The solution has some collection modules so that no one needs to collect the information in person. Using that collection method, we can directly give instructions to the network, and it will collect and pass the information into the dashboard.

The solution's asset management is really great compared to Dragos or Nozomi. The solution's technical support is also really good.

Currently, we are facing some issues on the manufacturing floor. Claroty Platform collects the latest information, but instead of incorporating it into the right asset, it creates new assets in the asset inventory. For example, it has used a different IP address for the same asset through the DHCP server. Instead of merging those two assets into a single one, Claroty Platform creates a duplicate.

There are some misconceptions about alert description areas. The tool does not properly throw the right description for the relevant alerts. If it's a denial of service, it shows some other improper description there. The solution also shows some improper activity information in the dashboard.

We face issues in the alert investigation area because it does not properly give the alert communication patterns. I don't know whether the problem is with the network segmentation or with Claroty. I feel Claroty should take some more steps to improve it.

The tool also has the capability to give the PCAP for every alert. However, it does not give proper information in the PCAP file for a few PCAPs, such as a host scan or port scan. When I used to search in Wireshark or Tshark, it did not properly give a whole conversation between the source and the destination.

I have been using Claroty Platform for one year and seven months.

The solution's 4.9.1 version is really good, and we didn't encounter any bugs. However, it's all about network segmentation and how manufacturing follows the asset registry. If they do not properly perform network segmentation, Claroty cannot provide robust information in the dashboard.

Around seven to eight people are using the solution in our organization.

We have contacted the solution's support team multiple times for many issues with bugs in previous versions. Sometimes, when we try to download some of the latest vulnerabilities or insights from Claroty, we get a 500 internal error. The support team rectified this and solved it in the latest update.

I rate the technical support seven and a half out of ten.

Neutral

We previously used Armis. We switched to Claroty Platform because Armis does not have asset management capabilities like Claroty.

We have hosted the solution on VMware. Previously, we used the on-premise machine from Claroty, but we changed it to a virtual machine due to some resource constraints.

The solution has a lot of issues regarding the alert investigations. Recently, it pushed its latest update to 5.0.1, and they have totally moved to the Ubuntu OS. Claroty claims it has rectified several issues and provided solutions for those in that latest version.

I would recommend the solution to other users. However, Claroty is not good for a power grid environment. It is easy for a beginner to learn to use Claroty Platform for the first time. I started working on the solution after I finished college. It was new for me, but I slowly learned it, and now I am in an admin position.

Overall, I rate the solution seven and a half out of ten.

I use the Claroty Platform to analyze data in industrial environments, especially for operational technologies in manufacturing.

I like how the tool does passive and active discovery and threat detection and shows risks, recommendations, and vulnerabilities. It gives risk scores and gathers everything in one place - IP, device name, etc. We can integrate it with other tools for overall network mapping. It's useful for audits, compliance, and monitoring of all devices in the industry. It provides both monitoring and control. We also have SRA for incident response, which lets us search all alerts if we deploy the Claroty Platform.

For improvement, I think the training could be more practical. We have external training, but they're mostly theoretical. I want the solution to provide hands-on lab experience to help users learn better.

As a user or administrator, it's easy to use. However, documentation is a bit lacking for deploying the collection server or spanning and trafficking. We need clearer guidelines on what to do first, second, and so on.

The two points for improvement are more lab-oriented, practical training, and better documentation for implementing the tool. Even though the support is very good and they explain everything, having clearer documentation would be helpful.

I have been using the product for a year. 

The tool is very stable and useful for monitoring industrial environments.

In my team, about five to six people use the Claroty Platform, and including clients, it ranges from five to ten people.

I've contacted the support team, and they've been very helpful. They assist with troubleshooting and solving issues, even joining meetings to help us understand things better.

Our company chose Claroty Platform because it provides everything needed for auditing, assessment, tool-based assessment, integration, and deployment. It might be challenging for smaller companies due to financial reasons. But it offers great integration, extendibility, and visualization. We can do custom reporting and have access control. It provides a complete factory involvement experience, including network traffic analysis, deep package inspection, and protocol support. We can see which ports are open, protocols are working, device types, and vendors - everything under one roof.

If someone asked me whether to use the tool, I'd first check if their environment is IT or OT. It is tailored for OT environments, which is its best advantage. It offers OT-specific threat intelligence, comprehensive visibility of IT and IoT assets, too, and detailed network mapping. It helps understand potential vulnerabilities and improve overall security posture.

Claroty Platform has advanced threat detection, behavioral and anomaly detection, and industrial protocol support. It also provides risk and vulnerability management with proper scoring and Secure Remote Access for monitoring remote workers or third-party vendors. We can connect it with Azure SSO for just-in-time admin access and use identity providers for user management.

I rate the overall solution an eight out of ten. 

We use the solution in our company to monitor and manage all the ODE assets of all our plants, mainly in the United States. We're also implementing Claroty Platform in our Mexico plant.

The solution's most valuable feature is the map, which shows everything that is connected and communicates with each other. The solution's vulnerability management capabilities are good enough. It always tells us about vulnerabilities in real time so that we can take the next steps and fix everything.

I have been working with Claroty Platform for one and a half years as a user. I also used to be a presales engineer and sold the solution for around five years. So, I have a total of six and a half years of experience with Claroty Platform.

We’ve never had any issues with the solution’s stability.

Scaling the solution is easy enough and not difficult. We have about ten people managing the solution at each site. A global security operation center manages the main solution, and around 30 to 40 people work with it.

I rate the solution’s scalability a nine out of ten.

The solution's technical support is awesome. There's always someone who can help you with anything.

I also use other tools like Nozomi, Tripwire, and Cyber Vision.

We've always had a good experience using the solution. With Claroty Platform, we can reach everything and see everything. It also helps us review any vulnerabilities. During the CrowdStrike issue a week and a half ago, Claroty Platform helped us with the PCs that went down. So, it's a very good tool.

Claroty Platform is a very easy tool. It was very easy to use the first time I looked at the tool as a pre-sales engineer. Then, I had a couple of training sessions. We had a new version of the solution a couple of months ago, and it's still very easy to use. I think everyone can use it. The tool may not be easy for some people, but it can be done with training.

It's easy to integrate Claroty Platform with the rest of our tools. The solution is worth the money. I would recommend Claroty Platform to other users because it's a very good monitoring tool. It's the best and most powerful monitoring tool in the market.

Overall, I rate the solution ten out of ten.

The main customers want visibility on their security devices. The first target is to implement the solution to give any panelist access to our and the customer's infrastructure.

Claroty is a good platform for increased business in network solutions.

Pricing could be improved.

I have been using Claroty Platform for two years.

The product is stable.

I rate the solution’s stability an eight out of ten.

One person is using this solution. We develop and install the product at the customer's site. Four people work with the solution.

The initial setup is very easy and takes two hours to complete. We are a group of five people deploying it.

I rate the product’s pricing a six out of ten, where one is cheap, and ten is expensive.

I'm doing the maintenance. I recommend the solution. 

Overall, I rate the solution a seven out of ten.

Our company has designed a project with Claroty Platform being used for the cybersecurity audit. Suppose our company needs to collect information about the systems in Indian Oil, HPCL, or other oil refineries. In that case, we collect the data and gather the information to look at the vulnerabilities, see how the firmware and networks look, and look at the protocols used in a particular environment. Our company gathers the aforementioned type of information with the help of Claroty Platform.

The most valuable feature of the solution stems from its visibility section since, within a very short amount of time, the tool provides visibility for users to see the devices that are connected to the systems in an environment and to see how the communication is going on while keeping a tab over other areas like alerts and insights, which can be useful for the system.

The product fulfills our company's needs. Currently, Claroty Platform focuses on industrial control systems and OT. If Claroty Platform expands to the IT network side, it will benefit Claroty and those who want the tool for their IT network part.

Information related to zero-day attacks, which are difficult to detect in a system, is an area of concern that needs to be improved over time by the Claroty Platform. Sometimes, the weaknesses in certain systems cannot be captured by Claroty Platform because it lacks knowledge about zero-day attacks.

The product's integration capabilities are an area of concern where improvements are required.

I have been using Claroty Platform for two to three years. My company is in partnership with Claroty Platform.

Stability-wise, I rate the solution a seven out of ten.

With the Claroty Platform in place, at times, my company is not able to connect some of the data with some other systems, which don't actively communicate with another system. Claroty Platform can't detect systems that don't actively communicate with other systems, so we have to use active queries. However, in passive detection, one can't detect systems. There needs to be some improvements in the product.

When it comes to scalability, the tool performs well in some areas, while it doesn't perform well enough in certain other areas. Scalability-wise, I rate the solution an eight out of ten.

As my company has a partnership with Claroty Platform, the seniors in my organization communicate with Claroty's support team if required.

The data is private, and we have to keep it on our company's server, so the solution is deployed on an on-premises model.

The solution is deployed for one day in our company within three to four hours to get the data and create a report consisting of the details of the vulnerabilities and what needs to be improved in the systems. In short, my company has not implemented the product on a timely basis. It is generally implemented for a day, together with the data, to analyze the data and for another communication part.

Tenable has also been expanding its OT security technology, so we can't compare Claroty Platform with it to decide on which would be the best tool for our company.

In terms of the product's ability to enhance cybersecurity in our company, I would say that I have three technical certificates of Claroty, including technical support and Claroty implementation certificates. Claroty Platform provides courses through its partner portal, from which others can learn about the tool and its implementation process.

The product helps mitigate potential threats, especially if its users have signature rules. The product also provides alerts.

My company is able to integrate the Claroty Platform with another product to get data from it. Claroty Platform's integration capabilities have some limitations since it can only be integrated with a limited number of systems. A tool like Tenable offers good integration and can be integrated with many external products, like SIEM, SOAR, or firewall products.

I recommend the product to those who plan to use it. My company also suggests our customers deploy the Claroty Platform.

Claroty Platform is a product that focuses on industrial control systems, and if people want to save their company's OT systems and cater to the needs related to the security area, then they can use the product.

I rate the overall tool an eight out of ten.

Our primary use case for the solution is to manage and monitor our enterprise-level IT infrastructure. We operate within a hybrid environment that includes both on-premise and cloud-based resources. The solution helps us with real-time monitoring, incident management, and performance analytics across our entire network.

The platform improved our organization's operational efficiency by providing proactive monitoring and quick resolution of issues. It has reduced our downtime and improved the reliability of our IT services. Our insights from its analytics capabilities have also informed better decision-making regarding our infrastructure investments.

The most valuable features include the real-time monitoring dashboard, which allows us to track system performance continuously, and the alerting system, which notifies us immediately of any potential issues. These features are crucial because they help us maintain high availability and reduce response times.

The product could be improved in terms of user interface design. While functional, the interface could be more intuitive and user-friendly, especially for new users who might find it somewhat complex initially.

We would appreciate enhanced integration capabilities with third-party applications and more advanced analytics features, such as predictive analytics, that can forecast potential system failures before they occur.

We have been using Claroty Platform for approximately two years.

In our experience, the platform has proven very stable, with minimal downtime and consistent performance even under high-stress conditions.

The product allows us to expand our monitoring capabilities as our infrastructure grows seamlessly. It handles increased loads without any noticeable degradation in performance.

The support has generally been excellent, though there is always room for improvement in response times and resolution efficiency.

Positive

We previously used a different monitoring tool. Still, we switched to this solution because of its superior scalability and the breadth of its features, which more closely align with our growing organizational needs.

The initial setup was complex because we needed to integrate it with various components of our existing infrastructure. However, the vendor's detailed documentation and our in-house team's expertise helped streamline the process.

We implemented the platform with the help of our in-house team. We did consult with the vendor's support team for certain aspects of the setup.

The solution offers comprehensive tools that greatly enhance your IT operations if implemented correctly. I recommend dedicating sufficient time to training your team on its use to leverage its capabilities fully.

I rate it an eight out of ten. 

It's a very good solution for what it promises.

The main improvement has been in continuous threat detection. So far, it's been a good experience with network monitoring capabilities.

It's mostly utilized for asset discovery and secure remote connection.

The main advantage of Claroty, when compared to its competitors, is Integrated secure remote access.

The knowledge of the threat landscape is pretty good. That's the only area that customers are concerned with once a solution is implemented. So, Claroty has a good team and a good way to update its installed base.

Claroty Platform could improve the pricing to get more acceptability in the market.

I have been using it for less than a year. 

We haven't had a lot of need for support yet, but so far, it's been good.

Claroty has certain benefits, especially in integrated secure remote access, but for general applications, Nozomi could be a good alternative.

It's more of an insurance against vulnerabilities and threats.

It's quite expensive compared to other options.

Overall, I would rate the product a seven out of ten. It is very good.