Advanced CoreX Technology

Advanced CoreX Technology

CoreX Technology

Claroty's advanced CoreX engine powers the Claroty Platform and is the foundation on which Claroty's integrated suite of products is built on. It was specifically designed to ensure safe, secure and reliable operations in large, complex industrial networks.


CoreX establishes a high-fidelity baseline model of the OT network and employs advanced, behavior-based anomaly detection, coupled with a powerful intrusion detection engine to rapidly discover known and unknown threats. The system continuously monitors OT environments for changes and analyzes the network to uncover vulnerabilities by engaging Claroty’s proprietary knowledge base.


The sophisticated visualization engine depicts network nodes and communications pathways down to the lowest levels of the OT network–down to the serial and fieldbus networks that control physical processes. Advanced filtering combined with active animations delivers a complete picture of the network and how nodes are communicating.

Data Collection

With multispectral data collection, CoreX analyzes industrial networks and provides 100% visibility of IoT and OT devices. Using proprietary dissectors for all major protocols and configuration files, the system safely extracts fine-grained device details about IT, IoT, and OT devices, discovers how they are configured and communicating, and deciphers the conversations across serial and IP-based networks – all the way down to the I/O level.

Precise Data Collection

A precise understanding of the OT network is a foundational requirement and Claroty’s multispectral approach leverages multiple data collection modes to safely provide nearly 100% visibility even in the most complex use cases. With multispectral data collection, customers can employ one or multiple modes to meet the unique technical, operational, deployment and cost requirements present in different industrial environments.

Scalable Architecture

Claroty’s solution can be deployed in a number of ways; from rack mount and DIN-rail form factors to hardened hardware and virtual appliances, container-based delivery models, embedded into select switches and routers as well as within the security infrastructure of our strategic partners.

See how you can lower your TCO with Claroty’s highly adaptive, multiple appliance models and flexible deployment architectures and be up-and-running enterprise-wide in less than 60 days.

Download the Data Sheet >>

Superior Visibility means Best Threat and Vulnerability Detection

Claroty’s advanced multispectral data collection and unique DPI produce a precise model of the network including visibility into IT, OT, and IoT (managed and unmanaged) devices. By automatically discovering and classifying network devices, the system consequently delivers superior threat and vulnerability detection as well as continuously monitoring the environment for threats and policy violations.

Bring Clarity To Your OT Network

request demo