Asset Classification
Categorizing devices by type, function, manufacturer, OS, and risk profile. ORDR uses AI/ML trained on 100+ million device profiles to automatically classify assets across IT, IoT, OT, and IoMT.
What is Asset Classification?
Categorizing devices by type, function, manufacturer, OS, and risk profile. ORDR uses AI/ML trained on 100+ million device profiles to automatically classify assets across IT, IoT, OT, and IoMT.
Asset classification is the process of categorizing every device on a network by what it is — type, manufacturer, model, operating system, firmware version, and function. It sounds straightforward, but doing it accurately at scale across tens of thousands of devices in mixed IT/IoT/OT environments is one of the most technically demanding problems in enterprise security.
Most devices don't announce what they are. A medical infusion pump, an IP camera, and an industrial sensor may all present as generic IP endpoints on the network. Accurately classifying them requires fingerprinting across multiple signals: DHCP options, mDNS broadcasts, HTTP User-Agent headers, TLS certificate attributes, Modbus or BACnet protocol responses, and traffic patterns. No single signal is reliable alone; accurate classification requires correlation across many.
The stakes are high. Misclassified assets receive wrong risk scores, wrong access policies, and wrong vulnerability assessments. A clinical device classified as a generic IT endpoint may get a patch instruction that would disrupt patient care. An industrial controller classified as unknown may be excluded from segmentation policies entirely. Classification accuracy directly determines the quality of every downstream security decision.
Key Facts
- ORDR's device library includes profiles for 100M+ device types across IT, IoT, OT, and IoMT
- Up to 40% of devices in enterprise environments are misclassified or unknown in existing CMDBs
- Accurate classification reduces vulnerability noise by filtering CVEs to only those that apply to the actual device type
- Classification accuracy is the single largest variable in determining IoT security program effectiveness
How ORDR Addresses Asset Classification
ORDR's classification engine is trained on a library of more than 100 million device profiles, accumulated across thousands of enterprise deployments in healthcare, manufacturing, and critical infrastructure. It uses multi-signal fingerprinting — traffic analysis, protocol inspection, DHCP attributes, and contextual integration with CMDBs and asset management systems — to achieve high-confidence classification without active probing.
See ORDR in actionFrequently Asked Questions
See Asset Classification in practice.
ORDR gives security teams complete visibility into every connected asset—and the intelligence to act on what matters most.