Sold by: Spotlight Security
Security posture management that detects, explains, and fixes exposures across IT, IoT, and OT devices from a single dashboard.
Overview
Spotlight Security - Security Posture Management for IT, IoT, and OT
Your network and devices don't need another alert. They need direct fixes.
Legacy cybersecurity platforms were built for IT environments with bolt-on OT support. They identify problems, generate tickets, and wait for expensive professional services to intervene. Spotlight was built differently - from the attack surface up. Point us at one machine and we find the rest, then deploy onto them from the inside with no VPN and no appliance. We check what is exposed, explain it in plain English, and fix it with your approval. Safe to run beside a plant floor by design, not by setting.
One platform replaces three panes of glass. Instead of pivoting between an IT console, an OT monitor, and an IoT portal with zero correlation, Spotlight gives you one inventory across IT, IoT, and OT - the machines with an agent and the machines without - on the same dashboard.
How It Works
Four stages. One dashboard. No mandatory deployment engagement.
01 - Connects Lightweight agents deploy in minutes on Windows, macOS, Linux (x86 and ARM), FreeBSD, and QNX - servers, workstations, Linux-based controllers, HMIs, and cameras. From there they discover the rest of the estate: firewalls, switches, and devices with no host OS to install on.
02 - Detects Agents report what is actually on each machine - open ports, running processes, accounts, patch state, firewall rules - and flag what is exposed or drifting from policy.
03 - Resolves An integrated LLM translates complex logs and code into plain-English explanations. Administrators remediate directly from the dashboard with one-click actions or guided commands. All actions are approval-gated - you approve, Spotlight executes.
04 - Learns Telemetry from every remediation sharpens Spotlight's models, which are tested against containerized attack scenarios with scored checkpoints. Every fix makes the next one faster.
Key Outcomes
- Turn an unknown estate into a known, controllable one - discover every device on your network, including those your endpoint tool will not run on and your OT monitor can only watch
- Reduce mean time to remediation - go from detection to resolution in under a minute with approval-gated, on-device remediation
- Eliminate mandatory professional services - no expensive remediation engagements or surprise service fees, just software that works
- Cover IT, IoT, and OT in a single view - continuous posture and configuration monitoring across all device types
- Deploy without disruption - lightweight agents install in minutes with no VPN, no appliance, and no downtime
- Multi-site and multi-tenant ready - role-based access control and advanced telemetry and reporting included in every plan
Built for Critical Infrastructure
Spotlight is purpose-built for environments where downtime is not an inconvenience - it is a public safety event.
- Manufacturing - Defend production lines, industrial control systems, and connected equipment including plant-floor PCs, industrial IoT, DCS, and protective relays without halting operations
- Electric Utilities and Co-ops - Protect grid infrastructure, SCADA systems, and substation automation from nation-state actors and opportunistic attackers without disrupting power delivery
- Water and Wastewater - Secure treatment plant controls, pump stations, HMIs, PLCs, and distribution systems against increasingly targeted attacks on municipal water infrastructure
- MSPs and Channel Partners - Run one inventory across every client site from a single multi-tenant portal with per-client reporting and role-based access control
Every Plan Includes
- Lightweight agent deployment across all devices
- Continuous posture and configuration monitoring
- Plain-English issue explanations
- Approval-gated remediation
- Coverage for IT, IoT, and OT devices
- Multi-site deployment
- Role-based access control (RBAC)
- Advanced telemetry and reporting
Highlights
- Detect and remediate, not just alert. Unlike legacy tools that stop at generating tickets, Spotlight goes all the way to the fix. Lightweight agents deploy in minutes on Windows, macOS, Linux (x86 and ARM), FreeBSD, and QNX. They discover your full estate - servers, workstations, controllers, HMIs, cameras, firewalls, and switches - then report open ports, running processes, accounts, patch state, and firewall rules.
- One inventory across IT, IoT, and OT. See every device - the machines with an agent and the machines without - on a single dashboard. No more pivoting between an IT console, an OT monitor, and an IoT portal. Spotlight covers the devices your endpoint tool will not run on and your OT monitor can only watch, turning an unknown estate into a known, controllable one. Purpose-built for critical infrastructure including manufacturing, electric utilities, water systems, and managed service providers.
- No mandatory deployment engagement. Point Spotlight at one machine and it finds the rest, then installs onto them from the inside with no VPN and no appliance. Agents deploy in minutes, not weeks. Telemetry from every remediation sharpens Spotlight's models, which are tested against containerized attack scenarios with scored checkpoints so detection improvements are measured, not asserted. Every fix makes the next one faster. Multi-site deployment and role-based access control are included.
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
Devices (networks up to 250) | One monitored IT, IoT or OT device for networks of 1-250 devices. Includes agent deployment, continuous posture monitoring, plain-English findings, approval-gated remediation, RBAC and reporting. First network setup included. | $8.00 |
Devices (networks of 251-1,000) | Same, for networks of 251-1,000 devices. | $6.00 |
Devices (networks of 1,001+) | Same, for networks of more than 1,000 devices. | $4.00 |
Dimension | Description | Cost/unit |
|---|---|---|
Additional network setup (one-time) | Coverage for each additional network beyond the first. Billed once per network. | $499.00 |
Vendor refund policy
Contract purchases are refundable within 14 days of a new subscriber first purchase and non-refundable after that. Renewals are non-refundable, so cancel auto-renewal before the renewal date. Pay-as-you-go usage such as additional devices and additional network setup is non-refundable once metered. Metering errors are credited on the next invoice. To request a refund, email sales@spotlightsecurity.ai with your AWS account ID.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Spotlight Security provides support to help you deploy, operate, and troubleshoot across your IT, IoT, and OT environments.
For support inquiries, contact the Spotlight Security team through the company website at <https://spotlightsecurity.ai/> to get assistance with agent deployment, dashboard configuration, remediation workflows, and general product questions. You can also email <support@spotlightsecurity.ai>.If you need help getting started, Spotlight offers a Network Exposure Assessment engagement where you send a firewall config export and select 25 machines. You receive a ranked list of what is exposed, exactly how to fix it, and a guided walkthrough.
For demos and onboarding assistance, you can book a live demo through the Spotlight Security website to see agents find and fix a real issue on a real device.
For refund requests or billing questions related to your AWS Marketplace subscription, please contact Spotlight Security directly through the website or reach out to AWS Marketplace customer support.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Armis Centrix, the A.I. powered Cyber Exposure Management Platform, is powered by the Armis AI-driven Asset Intelligence Engine, which sees, defends and manages billions of assets around the world in real time.
Centrix is a seamless, frictionless, cloud-based platform that proactively mitigates all cyber asset risks, remediates vulnerabilities, blocks threats and protects your entire attack surface.
Sentinel-IQ is an advanced AWS SaaS solution designed to deliver real-time threat detection, predictive analytics, and automated response for enterprise cybersecurity and operational resilience. Powered by AI and machine learning, it seamlessly integrates with existing systems to provide proactive risk mitigation and compliance assurance. Sentinel-IQ ensures secure, scalable, and efficient protection for mission-critical operations.
SaaS-Powered Security and Visibility of OT and IoT Networks
Tenable OT Security Enterprise Manager provides an additional layer of enterprise-wide visibility and control on top of OT Security
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.