Claroty's advanced CoreX engine powers the Claroty Platform and is the foundation on which Claroty's integrated suite of products is built on. It was specifically designed to ensure safe, secure and reliable operations in large, complex industrial networks.
CoreX establishes a high-fidelity baseline model of the OT network and employs advanced, behavior-based anomaly detection, coupled with a powerful intrusion detection engine to rapidly discover known and unknown threats. The system continuously monitors OT environments for changes and analyzes the network to uncover vulnerabilities by engaging Claroty’s proprietary knowledge base.
The sophisticated visualization engine depicts network nodes and communications pathways down to the lowest levels of the OT network–down to the serial and fieldbus networks that control physical processes. Advanced filtering combined with active animations delivers a complete picture of the network and how nodes are communicating.
With multispectral data collection, CoreX analyzes industrial networks and provides nearly 100% visibility into the OT environment. Using proprietary dissectors for all major IT and ICS protocols and configuration files, the system safely extracts fine-grained details about both IT and industrial assets in the OT network, discovers how the assets are configured and communicating, and deciphers the automation system conversations across serial and IP-based networks – all the way down to the I/O level.
A precise understanding of the OT network is a foundational requirement and Claroty’s multispectral approach leverages multiple data collection modes to safely provide nearly 100% visibility even in the most complex use cases. With multispectral data collection, customers can employ one or multiple modes to meet the unique technical, operational, deployment and cost requirements present in different industrial environments.
Claroty's advanced CoreX engine was specifically designed to ensure safe, secure and reliable operations in large, complex industrial networks and is fully tuned to support multiple use cases, technical constraints, and environments including sites with limited computing power, requiring a smaller physical footprint, and scenarios where communication over low-bandwidth links is necessary.
Learn More about Claroty’s Enterprise-Class Sensor Deployment Architecture
Claroty’s advanced multispectral data collection capability produces a very precise model of the OT network including all the assets, communications pathways and the actual OT communications happening on the network. This enables the Claroty products to deliver superior threat and vulnerability detection and powers advanced cybersecurity capabilities such as virtual zoning, network segmentation and attack vector analysis.