Armis Device Security Platform

I use Armis for asset discovery, OT and IoT security, and Armis provides vulnerability management for OT and IoT devices.

The main use case of Armis is asset visibility; apart from asset visibility, Armis can also provide threat visibility.

Based on my field experience, I found Armis very useful for health and medical devices, as well as for critical infrastructure and manufacturing. It is beneficial for the government too. When visiting government sites as a customer, they often lack visibility about OT and IoT devices, and Armis can provide very good visibility. Along with visibility, Armis offers real-time continuous monitoring, threat visibility, and vulnerability management across those devices.

The best features Armis offers include vulnerability management for OT and IoT devices, providing risk prioritization, and offering protection across all connected assets. Armis cyber exposure management is very good as it provides continuous visibility, risk prioritization, and protection across all connected assets.

Armis has positively impacted my organization by providing asset discovery for both OT and IoT, as well as threat visibility for OT and IoT devices along with vulnerability information, including the CVE number so that I can fix the threat on OT and IoT devices. Most of the time, focus is on IT devices and attention is not paid to OT and IoT. Armis facilitates focus on OT and IoT as well, closing the gap that often exists. Armis makes life easier for customers by providing visibility of OT and IoT, as well as threat visibility.

Armis has a user-friendly interface, is very useful for customers, provides quality support, and has a global presence allowing easy access for both customers and Armis representatives.

The console is user-friendly.

Armis handles compliance requirements in my industry very well and is useful.

For improvement, I suggest adopting more automation and making the solution AI-enabled. If Armis can be autonomous, it will be more useful for customers. If it can respond to threats in real-time, it will also be more helpful.

Everything is positive regarding Armis's performance. I observe that Armis provides very positive use cases to customers. A few improvements could be aligned with market trends, as the market is moving towards AI-driven technology, which is why I suggest that it should be AI-driven and powered by artificial intelligence and autonomous capabilities.

I have been using Armis for the last five to six years.

Armis is stable and reliable, and it provides availability for customers.

Scalability is very good with Armis. Customers typically enjoy the solution and do not face any issues both before deployment during the POC and after deployment once they release the PO and get the implementation done.

Customer support is good.

Previously, there were no existing products in the market when I visited customer places for OT and IoT security. There was no existing solution available for them. Armis is the new product that I pitch to customers.

I have seen a return on investment with Armis. I would like to mention a few points about the ROI: the first ROI is threat reduction, the second is operational efficiency providing a 90% faster mean time to resolution (MTTR). It provides asset visibility and saves costs associated with asset visibility. There is a 98% reduction in vulnerability workloads, enabling focus only on high-risk issues. Additionally, there are so many alerts, and Armis offers threat prioritization and vulnerability prioritization so that I can focus on high-risk issues, along with ten to fifteen percent annual savings on software licensing by reclaiming unused capacity and 99% of automated actions completed in a second. Summarizing the ROI as a table, it shows ROI areas for threat blocking, operational efficiency with a 90% reduction in MTTR providing around 60% improvement, and for threat blocking, 99% of attacks are prevented, while also providing asset discovery and vulnerability workload management.

My experience with pricing, setup costs, and licensing is overall good. The price is not very high, licensing is good, and setup and deployment costs are average.

I had not evaluated any other options before choosing Armis.

I have served many customers with Armis, and they express satisfaction, stating that it is very useful and has helped clean up their attack surface area.

Integration is available for Armis with various tools. Armis is getting acquired by ServiceNow, and integration is very much available with ServiceNow. Additionally, Armis can be integrated with Okta, CyberArk, identity and access management solutions, and security and intelligence tools such as CrowdStrike, Cybereason, and McAfee EDR solutions. Integration is also available with Rapid7, Qualys, Check Point, Palo Alto, and perimeter firewalls such as FortiNet. These integrations and threat intelligence are key points.

The performance of Armis in terms of detection speed and accuracy is very good. Both detection and speed are impressive.

Armis is user-friendly and easy to maintain for customers on a day-to-day basis.

I would advise others looking into using Armis to go with this product to easily fulfill their gap for OT and IoT, as that is a significant attack surface area that remains open without this type of product. I suggest not to leave the attack surface area unsecured. Armis is also very beneficial for asset discovery, real-time continuous threat monitoring, and threat hunting.

Armis transforms cybersecurity from a cost center into a business performance driver, delivering quantifiable ROI through reduced risk, operational efficiency, and compliance readiness for board-level discussions.

I rate Armis ten out of ten because it serves customer needs for OT and IoT visibility. Apart from visibility, it also provides threat visibility, vulnerability prioritization, and detailed vulnerability information. In that area, if you go back five to ten years, the attack surface area was fully open. Armis is the solution that fills that gap, and while there are competitors, I believe Armis has been doing a great job from the start.

In my day-to-day work, I use Armis for cybersecurity operations and an asset visibility project focused on enterprise IT, and we perform device monitoring using the tool.

During an enterprise asset visibility and vulnerability management initiative in a hybrid environment that includes corporate IT systems, unmanaged endpoints, and network-connected devices, we integrated Armis with our existing security monitoring workflows to identify unmanaged and unknown assets communicating across the network during one billing cycle. Armis detected several devices that were not properly registered in the CMDB or covered by traditional endpoint security tooling, including network-connected printers, legacy systems, and unmanaged IoT-type devices communicating internally.

Armis has proven helpful for automatically classifying devices based on behavior and network traffic patterns, identifying outdated systems with potential security exposure, prioritizing risky assets for further vulnerability assessments, and improving asset inventory accuracy for the security and operations teams. These capabilities provide significant benefits with the tool.

Some of the best features I find valuable in Armis include Agentless Asset Discovery, which is a very strong capability that does not require any agent but can discover all assets that are part of our systems or the CMDB. Real-time asset visibility allows us to perform asset monitoring and provides complete visibility of IT, OT, IoT, and cloud-connected assets. Behavioral monitoring and threat detection is very useful for monitoring device behavior and communication patterns, helping the SOC team with threat hunting activities.

Additionally, vulnerability prioritization focuses not only on CVSS scores but also on exploitability, which is very impactful during vulnerability management. Armis performs very well in deep-diving into OT and IoT environments, providing detailed visibility into industrial and connected devices that are usually difficult to monitor with standard endpoint tools. The product can also be integrated with any security monitoring tools such as SIEM, SOAR, NAC, firewalls, and CMDB integrating platforms, which is helpful.

Armis has a positive impact by improving enterprise-wide asset visibility, strengthening risk awareness, and helping the security operations team reduce blind spots. Key features include improved asset inventory accuracy, better risk prioritization which is very impactful during security operations and vulnerability management, enhanced security monitoring providing continuous improved visibility into suspicious and unusual device activity, and stronger IoT and OT visibility ensuring proper visibility between IoT and SC devices. Faster incident investigation is facilitated by providing all risk metrics and exploitability information, which makes it easier for the incident management team to prioritize threats and work on them accordingly.

In the incident response scenario, the incident response time has been reduced significantly because we have incident response plans available, but identifying which issue should be prioritized first takes considerable time. Armis helps to prioritize incidents and threats, allowing us to provide P1 priority incidents to the incident response team, which is very impactful. Detection takes substantial time, but with Armis helping detection through proper classification, it reduces time considerably, so we now focus solely on incident response to mitigate threats as soon as possible, which is very impactful.

My experience with Armis has been positive, especially around asset visibility, unmanaged device monitoring, and risk intelligence. However, there are a few areas for improvement.

Some features I can suggest include more granular role-based access control and dashboard personalization, better long-term historical trend visualization, improved asset grouping and tagging automation, and more AI-driven insights which would be beneficial for addressing future AI-related threats and exposure prioritization and anomaly detection. These are expected improvement areas for Armis in the future.

As I am working in a vulnerability management project, the vulnerability prioritization feature is very helpful for me because Armis focuses on CVSS and considers the exploit. If there is any critical vulnerability, it can be detected, and if any exploitability is available, it can easily prioritize that, allowing us to prioritize the vulnerability and provide remediation as soon as possible, which increases the security metrics in our environment and reduces risks using this feature.

I would advise that if you are working in vulnerability management, risk management, or SIEM SOX solutions, you can use Armis as it can help save time and improve overall risk scoring and asset prioritization, which will be very beneficial. I rate this product an overall eight out of ten.

My main use case is to identify all the devices in my network, connect to them, and identify the exposure alerts for those devices. I only have to discover all the devices, connect to them, and identify the alerts, the exposure alerts.

Instead of all the tools showing all the alerts, Armis will identify, with its AI feature, the main features that are risky and will only show those. That feature is very good for that purpose.

While other tools will provide all the alerts, such as one hundred or two hundred alerts, Armis will provide only one or two important alerts. That is the very best feature of Armis.

Another valuable feature is the auto-discovery feature. I do not have to install the agent in all systems. Armis will auto-discover on the network, connect to them, and start collecting logs. That is the best feature of Armis.

Armis has reduced the cost of employment because before, I had to take all the logs, and the logs required so many more employees. Now, I only have to take the risky ones that will be handled by one or two employees. That is very useful for us.

Previously in my company, I had to have five employees for that work, but currently, one employee is handling everything. That saves the cost of four employees.

Because it is very helpful for us to identify the main dangerous logs, instead of checking all the logs, the AI feature will give me only the important logs I have to see. That AI feature is very great in Armis.

It saves money and time also, both.

I am using Armis since last one year.

Armis is stable.

Armis is scalable. It is very good.

Customer support is very good.

I evaluated other options such as Log360 and IBM QRadar.

I advise that if you want cybersecurity, then you can mostly explore this tool. Armis is very useful. Instead of other tools, it will be very helpful and the AI feature is very great.

I confirm my experience with Armis, and as a cybersecurity specialist, I have several years of experience in this sphere. In terms of AI-driven risk assessments in Armis, I have insights to share based on my experience.

Real-time asset monitoring in Armis helps with network operations, especially in comparison to Nozomi. Contextual awareness in Armis helps me prioritize remediation efforts. I have been using metrics to evaluate asset behavior insights that Armis provides, and I can discuss how I evaluate its behavior.

AI is one improvement I noted for Armis, and I may have other examples as well.

I worked with Armis approximately 9 to 11 months ago.

In terms of stability, Armis is not completely stable, as sometimes incidents may occur.

Armis is scalable enough, though some limitations may exist.

Technical support from Armis is good, though it could sometimes be better.

The installation of Armis involves minimal challenges, making it generally smooth.

There is noticeable return on investment for Armis.

Armis is slightly on the expensive range based on what I have observed.

Armis is more suited for small and medium customers, while Nozomi and Claroty are targeted at different types. This assessment is connected with AI and threat intelligence when comparing Armis, Nozomi, and Claroty.

I am still dealing with Armis to some extent, as I have not stopped working with it for more than a year. I can confirm that I am also working with other vendors such as Fortinet and various vulnerability management solutions today. I would rate Armis around a specific number based on my experience on a scale from zero to 10 points.