Industrial Grade Security for Industrial Operations and Critical Infrastructure Reduce Risk and Secure Operations in a Rapidly Converging IT/OT WorldLearn More
Convergence of operational technology (OT) and IT systems can optimize production, drive innovation and increase efficiency. However, it can also increase your attack surface and introduce even more attack vectors.
Detecting complex and evolving cyber threats requires advanced tools, knowledge and training. For example, OT environments contain more than OT. Up to half of the environment can also contain IT-based devices. Stopping attacks and preventing damage requires expertise and comprehensive security that can address both.
Read more about accidental convergence in this Guide to Secured IT/OT Operations.
In the past 24 months, 50% of organizations experienced an attack against OT infrastructure that resulted in downtime to plant and/or operational equipment.Source: Cybersecurity in Operational Technology: 7 Insights You Need to Know, Ponemon Institute, 2019
Stopping an attack requires the ability to see it. In the past, siloed IT and OT security practices resulted in significant blind spots, thus limiting your ability to detect vulnerabilities and prevent attacks. Tenable.ot with Nessus eliminates blind spots and gives you a holistic view of your cyber exposure with both IT and OT domain expertise in a single solution. With Tenable.ot you can comprehensively identify potential risks and address security threats sooner.
Tenable.ot supports more than 90% of PLC products on the market today and has full integration with the Tenable product portfolio. To leverage your existing IT security investments, Tenable.ot also integrates with industry-leading enterprise IT security products. The result is a comprehensive security solution that leverages all security products and provides unprecedented IT and OT visibility so you can understand and defend your entire attack surface.
Threat Detection and Mitigation
Find more threats by leveraging a combination of powerful threat detection engines, which alert to potential incidents coming from IT or OT, external and internal sources—whether human or malware-based.
Tenable.ot identifies anomalous network behavior, enforces network security policies and tracks local changes on devices so your organization can detect and mitigate risky events in your Industrial Control System (ICS) environments.
Fine-tuning policies, anomalies and signatures enables you to customize the security and alarms that are optimal for your operation. Context-aware alerts and detailed information give you the intelligence you need to meaningfully respond to threats based on full knowledge and details into what happened.
Tenable.ot’s automated asset discovery and visualization capabilities provide a comprehensive, up-to-date inventory of all assets, including workstations, servers, human machine interfaces (HMIs), historians, programmable logic controllers (PLCs), remote terminal units (RTUs), intelligent electronic devices (IEDs) and network devices.
Tenable’s patented active querying capabilities discover dormant devices that do not communicate over your network. The inventory contains unparalleled asset information depth—tracking firmware and OS versions, internal configurations, patch levels and users, as well as serial numbers and backplane configuration for both IT and OT assets.
Proactively identify and remediate vulnerabilities before attackers exploit them. Drawing on comprehensive and detailed asset tracking capabilities, Tenable.ot uses a Vulnerability Priority Rating (VPR) that generates a score and triaged list of relevant threats. This is based on the specific equipment in your environment, as well as parameters such as firmware versions, relevant CVEs, proprietary Tenable research, default passwords, open ports, installed hotfixes and more. Reports include detailed insights, along with mitigation suggestions.
With Tenable.ot, you can track malware and user-executed changes made over your network or directly on a device. Tenable.ot provides a full history of device configuration changes over time, including granularity of specific ladder logic segments, diagnostic buffers, tag tables and more. This enables administrators to establish a backup snapshot with the "last known good state" for faster recovery and compliance with industry regulations.
Leverage Tenable’s “Ecosystem of Trust”
Leverage your existing security investments. Tenable.ot fully integrates with Tenable.sc and Tenable.io for full visibility, security and control across your converged operations. Tenable.ot also has full integration with IT security technologies you already use such as IT service management, next-generation firewalls (NGFW) and security information and event management (SIEM) vendors.
With integration and collaboration across the Tenable product line as well as leading IT and OT security systems, you’ll gain full situational awareness needed to secure operations from today’s IT and OT threats.
2019 IoT Innovator Awards Bronze Winner
Tenable.ot (formerly Indegy)