Claroty CTD is a self-hosted, on-premises platform for protecting cyber-physical systems across civilian and defense networks. It discovers XIoT assets using passive, active, and AppDB methods, then builds a centralized inventory with asset profiles, including assets in air-gapped environments. CTD maps networks into Virtual Zones and can flag cross-zone communication violations; it can also work with existing firewall and NAC solutions for policy-based segmentation. Exposure management compares assets with tracked exposures and current KEV and EPSS reporting to help teams prioritize risks. Five detection engines profile assets, communications, and processes, establish behavioral baselines, and alert to known and emerging threats in real time. Deployment options include on-premises installations and mobile flyaway kits for sensitive environments. Integrations include xDome Secure Access for remote incident response and remediation, Rockwell Automation AssetCentre, and SIEM tools. Claroty lists more than 450 industrial protocols and about 60 technology partners. It says technical support is available 24 hours a day, seven days a week, with response targets varying by incident priority. Pricing is on request.
Who it is for
CTD suits public-sector and federal OT organizations with different levels of cybersecurity maturity, including locations without dedicated OT security staff. Its on-premises and flyaway deployment options address sensitive and air-gapped environments.
What is good
- Discovers assets through passive, active, and AppDB methods.
- Maps Virtual Zones and flags cross-zone communication violations.
- Five detection engines establish behavioral baselines.
- Supports more than 450 industrial protocols.
- Offers on-premises deployment and mobile flyaway kits.
What to know first
- Self-hosted deployment is required.
- Pricing is available on request.
- Support response targets vary by incident priority.
Verdict
Claroty CTD is built around asset discovery, network visibility, exposure management, and threat detection for OT and cyber-physical environments. Its deployment model and pricing-on-request approach are important considerations for organizations evaluating it.
Claroty CTD plans and pricing
All plansCompared on OT and ICS security monitoring software
- Deployment
- on_premises
- Passive monitoring
- Yes
- OT asset discovery
- Yes
- Supported protocols
- Modbus, DNP3, CIP, OPC UA, 450+ industrial protocols
- SIEM integration
- Yes
