Automated OT Asset Management
SANCTUARY Insight combines continuous passive network monitoring with non-intrusive active querying. The platform identifies all IT and OT devices down to the field level – non-disruptive, precise, and optimized for sensitive production environments.
Seamless OT Asset Management
Struggling to manage and secure your growing OT landscape? SANCTUARY Insight offers a single solution that seamlessly automates OT asset discovery, vulnerability assessments, and actionable recommendations. Gain real-time transparency, streamline compliance, and empower your team to optimize security and efficiency in your production environment. Take control of your OT security today.
Automatic Discovery and Inventory of All OT Devices
SANCTUARY Insight gives you the ability to take control with a comprehensive, automated solution. Our innovative platform seamlessly combines passive and active detection, providing unparalleled insight into your entire OT landscape. Effortlessly identify all devices, from network devices to field sensors, and gain detailed insights through native protocol communication, ensuring your critical processes are not disrupted. Actionable security recommendations guide you in remediating vulnerabilities, while intuitive dashboards keep you informed and in control. Insight uses sensors installed in the production network to identify all IT and OT devices. These sensors can be deployed as hardware or software components and collect detailed information about each device, such as:
- Gerätetyp
- Hersteller
- Modellbezeichnung
- Seriennummer
- Firmware Version
- Betriebssystem
- Installierte Software
- Netzwerkverbindungen
OT Asset Visibility and Efficiency
As an OT administrator, you know how important it is to effectively manage your OT resources. Conventional IT tools are inadequate in the OT landscape, as devices are sensitive and often lack sufficient computing and network capacity. This is where SANCTUARY Insight comes in. Our solution intelligently collects device information via IT protocols (e.g., ARP, SNMP, LLDP), OT protocols (PROFINET, EtherNet/IP, ModbusTCP, OPC-UA, BACnet, and many others), as well as manufacturer-proprietary protocols such as Siemens S7 or Beckhoff ADS.
Passive Detection
Our solution begins with the passive detection of Ethernet-based devices. This initial phase provides a comprehensive overview of your network topology without disrupting operations.
Active Discovery
This is followed by the active phase, in which we delve deeper using OT-specific protocols. Through non-intrusive communication, we extract detailed information about each device. Importantly, this active interaction is indistinguishable from normal OT device communication.
Minimal Network & Device Impact
Worried about overloading the network or a PLC? No need to worry. Our communication is gentle and causes only minimal traffic. We target specific devices and speak their native protocols, ensuring both accuracy and device preservation.
Comprehensive Cybersecurity Analysis
Insight goes beyond basic asset management functions and provides comprehensive cybersecurity analysis of OT devices. This includes:
- Abgleich mit Datenbanken für Sicherheitsrisiken
- Erkennung von ungepatchten Sicherheitslücken
- Analyse von Firmware-Images auf bekannte Schwachstellen
- Identifizierung potenzieller Angriffspunkte
Actionable Recommendations and Risk Assessment Support
The results of the cybersecurity analysis are visualized in an intuitive dashboard that provides OT operators with a real-time overview of the state of the OT landscape. The dashboard also includes actionable recommendations for remediating security issues.
SANCTUARY Insight enables companies to improve and efficiently manage the cybersecurity of their production environments. The solution provides valuable support in conducting risk assessments, as required by standards such as IEC 62443, especially during times of staff shortages.
FAQ
Contact
Would you like to test Insight or receive a quote? Contact us!