Ordr Now Addresses the Entire Asset Management and Security Journey, from Visibility and Risk-Based Vulnerability Management, to Advanced Threat Detection and Segmentation

Santa Clara, CA – March 19, 2024 – Ordr, the leader in AI-powered asset intelligence, today announced the launch of its new OrdrAI CAASM+ (Cyber Asset Attack Surface Management) product, built on top of the market-leading OrdrAI Asset Intelligence Platform.

For years, Ordr has been solving asset visibility and security challenges in the world’s most demanding environments, including healthcare, financial services, and manufacturing. Building on its proven Asset Intelligence Platform with unique features such as the Ordr Discovery Engine for unified asset discovery, AI/ML classification and analytics, and automated policy creation and workflows, OrdrAI CAASM+ provides a frictionless option for organizations to manage their entire asset attack surface — including devices, users, installed software, cloud, and SaaS.

Industry analyst firm Gartner defines CAASM as “…focused on enabling IT and security teams to overcome asset visibility and exposure challenges… primarily through API integrations with existing tools.” CAASM is a key component of “continuous threat exposure management,” one of Gartner’s “Top Strategic Technology Trends” for 2024. With comprehensive and accurate visibility into all assets, devices, and users, security teams can confidently reduce the time required to understand, report, react, and remediate security exposure and incidents, while dramatically simplifying collaboration and communication among teams and with business leaders.

Not all CAASM solutions are created equal. OrdrAI CAASM+ goes beyond API-only solutions, utilizing API data collection and proprietary discovery methods with AI/ML classification to give accurate, complete asset visibility, business context, and insights. Key features include:

• Complete asset visibility: Utilizing API integrations and Ordr’s Discovery Engine, CAASM+ offers real-time visibility into all devices, cloud assets, applications, and SaaS apps.

• Accurate asset visibility: Say goodbye to duplicated and inaccurate inventories. CAASM+ provides a de-duplicated, correlated, and accurate single source of asset truth, eliminating noise and blind spots such as the 40% of IoT, OT and IoMT devices that are undetected today.

• Risk-based vulnerability prioritization: CAASM+ delivers a prioritized list of top vulnerabilities with risk scores, using Ordr’s powerful mapping and correlation engine to align security impact with business context.

• Enables natural language queries: Ordr simplifies how teams understand their security posture, and how they obtain information to protect their environment, with generative AI powered natural language queries.

• Surface security gaps and exposure: CAASM+ automatically surfaces issues on a continuous basis, such as devices running outdated operating systems, or missing EDR or MDM agents.

• Automate remediation: Remediation workflows are automated using ITSM, SIEM, and SOC integrations, empowering teams with asset and business data to accelerate incident response.

“We’ve spent years building an enterprise-scale asset intelligence platform, with an asset knowledge base and the unique functionality needed to secure mission-critical devices,” said Pandian Gnanaprakasam, co-founder and Chief Product Officer, Ordr. “We now offer all enterprises an easy-to-deploy CAASM+ product to secure their expanded attack surface — devices, users, installed, SaaS, and cloud workloads. Compared to other CAASM solutions, Ordr delivers 2x asset visibility, 3x asset context, and 4x scale. More importantly, teams also have an easy expansion path to OrdrAI Protect for advanced security use cases.”

For more information, see how Ordr can help your organization establish enterprise visibility and improve its security posture.

SANTA CLARA, Calif., Aug. 10, 2023 /PRNewswire/ — Ordr, the leader in connected device security, today announced that it was named a Representative Vendor in the Gartner Market Guide for Cyber-Physical Systems (CPS) Protection Platforms.

“Gartner defines the cyber-physical systems (CPS) protection platforms market as products and services that use knowledge of industrial protocols, operational/production network packets or traffic metadata, and physical process asset behavior to discover, categorize, map and protect CPS in production or mission-critical environments outside of enterprise IT environments.” Gartner defines CPS as “engineered systems that orchestrate sensing, computation, control, networking and analytics to interact with the physical world (including humans).”

“As threats multiply, a once generic operational technology security market is rapidly evolving into distinct categories. Cyber-physical systems protection platforms that discover and protect assets in production or mission-critical environments are emerging as a leading market category,” noted Katell Thielemann, Distinguished VP Analyst, and Wam Voster, VP Analyst at Gartner.

“Due to their very nature, cyber-physical systems in industries such as manufacturing, smart cities and healthcare are increasingly targeted by attackers,” said Jim Hyman, CEO of Ordr. “We’re seeing organizations embrace an asset-centric approach to cybersecurity, to address the complexity and variety of old and new assets. Ordr differentiates not only via the depth of our asset and attack surface visibility capabilities, but more importantly – for our ability to secure every asset via automated policies including Zero Trust segmentation.”

Key findings of the Gartner Market Guide include:

• The CPS protection platforms market is growing, as adoption accelerates due to increased threats, existing and new vendors position more aggressively in the market, and new entrants target underserved vertical industries.
• Once focused mainly on passive deep packet inspection, most vendors now seek differentiation and richer inventories with a variety of additional techniques, including native protocol active queries.
• They also rapidly deploy additional functionalities such as vulnerability management, threat intelligence, visualizations, alerts, playbooks or feeds into other IT security (and inventory) tools, thereby creating a new asset-centric security discipline for CPS security.

Ordr is the only purpose-built platform to discover and secure every connected asset, including traditional IT, IoT, IoMT, OT, and cyber-physical systems. The platform quickly grants visibility into the make, model, serial number, location, and application/port usage of each device, establishing an accurate view of the attack surface, highlighting vulnerabilities, end-of-support, recalls, and weak passwords. Risk scores are calculated to help teams prioritize remediation and mitigation, and security policies for Zero Trust segmentation or threat response are established.

For more information, learn how Ordr helps enterprise organizations discover and secure every connected device in the network.

Gartner, Market Guide for CPS Protection Platforms, By Katell Thielemann, Wam Voster, Published 29 June 2023. 

Gartner Disclaimer

GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved.

Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s Research & Advisory organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

SANTA CLARA, Calif, 11 August 2021 — Ordr, the leader in agentless security for all connected devices, today released its annual report on the state of connected devices, titled “Rise of the Machines 2021: State of Connected devices — IT, IoT, IoMT and OT.” The 2021 report addresses pandemic-related cybersecurity challenges, including the growth of connected devices and related increase of security risks from these devices as threat actors took advantage of chaos to launch attacks.

The research incorporates security risk and trend analysis of anonymized data for 12 months (June 2020 through June 2021) across the company’s 500+ deployments in healthcare, life sciences, retail, and manufacturing verticals.

42% of connected devices were agentless or un-agentable devices

The number of agentless and un-agentable devices increased to 42% in this year’s report (compared to 32% of agentless or un-agentable devices in 2020). These devices include medical and manufacturing devices that are critical to business operations along with network devices, IP phones, video surveillance cameras and facility devices (such as badge readers) that are not designed with security in mind, cannot be patched, and cannot support endpoint security agents. With almost half of devices in the network that are either agentless or un-agentable, organizations need to complement their endpoint security strategy with a network-based security approach to discover and secure these devices.

Pelotons, Sonos, Alexas and Teslas discovered in the network

As a sign of the times, Ordr also discovered that popular consumer “devices” are often connected to the enterprise network, including Pelotons, Sonos speakers, gaming machines, Alexas and Teslas. While the usage of unsanctioned shadow IoT devices was highlighted in the 2020 Rise of the Machines report, there are 2 times more personal devices this year increasing the threat landscape and delivering a wealth of data for threat actors to use to profile targets.

Outdated operating systems present the greatest risks especially in healthcare

Ordr identified about 19% of deployments with devices running outdated operating systems Windows 7 and older, and almost 34% of deployments with devices running Windows 8 and Windows 10, which are expected to end-of-life in 2023 and 2025 respectively. Among the report’s most troubling findings was the discovery that 15% of medical devices and 32% of medical imaging devices run on outdated operating systems. This is because many medical devices remain in operation for a number of years and cannot be easily replaced for cost reasons. Segmentation is the only way to ensure security of these devices, keep them in operation and avoid the costs of replacing devices early.

“Once again, we found an astonishing and worrisome number of vulnerabilities and risks in connected devices, which is a crucial reminder that organizations must have comprehensive visibility as well as security for everything connecting to their networks,” said Ordr CEO Greg Murphy. “As the number of connected devices climbs, the number and sophistication of attacks targeting them will grow.”

Additional findings include:

• 46% of all connected devices are vulnerable to medium and high severity attacks. Top attacks included external communications to malicious URLs such as Darkside and Conti ransomware sites, followed by attacks due to vulnerable operating systems and finally lateral movement such as exploits and active threats/tools like Cobalt Strike or Eternal Blue.
• 55% of deployments have devices with orphaned user access. Devices with orphan accounts retain the same access rights as when they were associated with an active user. These orphaned user accounts provide a gateway to privilege escalation and lateral movement.

The report also includes a helpful set of steps organizations should take to implement Zero Trust for connected devices.

For additional findings and details, download the full report “Rise of the Machines 2021: State of Connected devices — IT, IoT, IoMT and OT”.

Our journey with Ordr Core started some time ago as we met with many enterprise customers regarding their difficulty maintaining a safe and secure network. As we listened, it became apparent that many companies could not protect themselves from cyber attacks or other intrusions without fully understanding what devices are in their network, complete topological map of their pathways and how they are communicating. There are many methods of gaining this visibility. But, most technologies involve agents, expensive hardware, along with large network and security teams that can take months, if not years to get started. We decided to change all that.

Today, we are pleased to announce the commercial availability of the Ordr Core software and our new self-service IoT Discovery Program.  At its essence, Ordr Core is IoT Device Security Made Simple.  It’s foundational software that gives customers granular visibility into all IoT devices, identifying managed and unmanaged devices and any potential security risks—all within minutes. Those who want to move beyond visibility to proactively protect these devices by integrating fully with existing software and infrastructure can easily upgrade to Ordr Premium at any time.

To make it even simpler, as part of the IoT Discovery Program, qualified users get a free zero touch provisioning sensor and the Ordr Core software at no cost for 30 days. Sensor deployment is plug and play. As soon as a sensor is “connected”, it automatically calls home to our cloud dashboard, and Ordr automatically starts classifying all devices and identifying their risks.

Ever wonder how many legacy Windows XP machines are in your network? Are you concerned about which devices might be vulnerable to Ripple20 or Wannacry? Are you worried about which security cameras still have default passwords?  We show you in one elegantly designed user interface.  If there are external communications to malicious URLs or even unusual sites, we tell you right away. To top it off, we will send you an Executive Report at the end of the program with all our findings so that you can take proactive steps to protect your network.

At Ordr, our engineering culture is rooted in the belief in delighting our customers.  We embrace speed and agility, we encourage growth and learning, and working towards delivering the best features for our customers.  Our architecture was designed to scale up or down from the start. We can see everything in a network and provide the context of the various communication pathways between devices, be it internal lateral movement or connection to external web sites of poor reputation. In fact, in one partner forum, an Ordr user said this about our platform, “If Ordr does not profile it, it does not exist”. From details such as device icons in our GUI, to our constellation view and Ordr Flow Genome, we have worked very hard to make the complex elegantly simple.

Ordr Core delivers unparalleled profiling of behavior and risk.  Some of the leading enterprise companies already trust Ordr to tell them what’s on their networks.  Now we can bring this visibility to you in minutes, not weeks or months.  If you are in networking, security, or asset management, get started here.

Pandian Gnanaprakasam

Pandian has more than 20 years of product and engineering leadership experience and is also a serial entrepreneur. Before founding Ordr, he was the Chief Development Officer at Aruba, responsible for all of engineering and product management functions. Aruba, an enterprise mobile wireless company, was acquired by HPE for $3 Billion in March 2015. Before Aruba, Pandian served as the head of engineering for Cisco’s multi-billion-dollar Wi-Fi business unit and before that as VP of engineering for low-end switching product lines. He graduated with a master’s degree in Electrical Engineering from IIT, Chennai, India and holds several patents to his credit in various networking technologies.

SANTA CLARA, Calif. and STAFFORD, England, Sept. 26, 2023 /PRNewswire/ — Ordr, the leader in connected device security, today announced it has partnered with the UK’s leading medical device asset management provider Integra e-Quip Ltd. The two companies have teamed up to deliver a best-in-class clinical asset management and security solution to healthcare organizations throughout the UK.

e-Quip’s Computerised Maintenance Management System (CMMS) maintains an inventory of all connected medical devices on a network, orchestrating critical processes such as device maintenance, procurement planning, and compliance assurance. Ordr’s AI-powered platform automatically discovers and classifies all devices connecting to a network, including IoMT (Internet of Medical Things) devices. The insights delivered by Ordr help teams identify and understand potential device risks like the presence of obsolete operating systems, manufacturer recalls, vulnerabilities, weak passwords, or outdated certificates.

Ordr is critical to address a number of UK compliance initiatives including:

• NHS Trust Data Security Protection Toolkit (DSPT) compliance
• Cyber Essentials
• NIS2 Directive

The integration between e-Quip and Ordr enables clinical engineering departments and IT teams to have real-time, granular visibility into all connected medical devices, ensuring that the e-Quip CMMS always remains up-to-date with accurate details. Ordr helps with the challenging activity of asset reconciliation – identifying authorized medical devices in the e-Quip system that are not on the network, or discovering deployed devices that are not in the CMMS. This is critical for real-time inventory, and to prioritize vulnerabilities and schedule patch management in clinical settings. In addition, with Ordr’s strong capabilities in behavioral baselining and threat detection, the combined solution can identify devices that are behaving abnormally, automatically initiating the correct e-Quip workflows to address these risks.

“Integra e-Quip is dedicated to making it easy for healthcare organizations to manage the myriad of medical devices they have connected to their networks. Doing this efficiently and effectively requires advanced visibility,” said Dal Jdali, CEO, at Integra e-Quip. “By teaming with Ordr we can provide customers with that real-time analysis of connected devices, helping them gain an accurate understanding of their attack surface – and the ability to identify and address potential risks.”

Ordr’s platform enables clinical engineering and IT teams across NHS trusts to not only discover and classify every connected device in the hospital, but also identify medical devices that have critical vulnerabilities that need to be patched. Armed with this information, the e-Quip system can then schedule and prioritize patching efforts, ensuring teams are up to date with potential risks across their environment – and are mitigating any risks in a timely manner.

“The global healthcare industry faces a unique set of challenges when it comes to managing and securing its connected devices,” added Pandian Gnanprakasam, co-founder and Chief Product Officer, Ordr. “Every NHS Trust is responsible for protecting all the connected devices operating in their networks whether they are aware of them or not. Ordr discovers, identifies, and assesses all of an organization’s connected assets giving healthcare security teams a comprehensive view into the activities of each device on their network, and a full understanding of the risks each pose. With operating systems being brought to end-of-life and devices not manufactured with security in mind, it is critical for teams to have the tools to access risk and quickly apply security policy protections.”

e-Quip CMMS is used across the U.K. by many National Health Services (NHS) trusts and their clinical engineering teams. The combined solution addresses the challenges NHS Trusts face in managing and securing the growing number of connected medical devices that today’s healthcare organizations have come to depend upon.

Read about how Ordr and e-Quip can help your healthcare organization discover and secure every connected medical device.

The “shared responsibility” philosophy for improving cybersecurity is becoming a worldwide phenomenon. It was woven throughout the U.S. National Cybersecurity Strategy issued by the White House in early March, and later that month the UK also announced its plan to improve cybersecurity for the country’s National Health Service (NHS).

On March 22, the UK government announced it will draft a six-year plan to “promote cyber resilience across the health and care sectors by 2030, protecting both services and patients.” That plan will build on five pillars for reducing the risk and impact of cyberattacks on healthcare organizations, while also improving recovery and resiliency should an attack succeed. Those pillars include:

• Identifying the areas of the sector where disruption would cause the greatest harm to patients, such as through sensitive information being leaked or critical services being unable to function.
• Uniting the sector so it can take advantage of its scale and benefit from national resources and expertise, enabling faster responses and minimizing disruption.
• Building on the current culture to ensure leaders are engaged and the cyber workforce is grown and recognized, and relevant cyber basics training is offered to the general workforce.
• Embedding security into the framework of emerging technology to better protect it against cyber threats.
• Supporting every health and care organization to minimize the impact and recovery time of a cyber incident.

Faster Response, Minimized Disruption

The second of the five pillars is notable to us because it calls for “uniting” the healthcare sector in an effort to combine resources and expertise to “enable faster responses and minimize disruption.” At a macro level that is a critical capability for hardening the networks of organizations connected through extensive digital supply chains. At the individual level it is vital for an NHS Trust to approach cybersecurity from a “whole hospital” perspective. Recognizing that, with IT systems operating on the same infrastructure as the operational technologies (OT) that run the hospital operations—and also alongside the sophisticated connected medical devices (Internet of Medical Things) integral to delivering a high quality of healthcare to patients—a vulnerability anywhere in the network puts the entire Trust at risk.

Protecting 1.7 Million Devices

The announcement points out that there are more than 1.7 million devices operating within NHS Trust networks, and that the strategy seeks to monitor each for suspicious activity that could indicate an attack or active threat. That’s wise, and an imminently achievable goal. In fact, many Trusts in the NHS system currently use the Ordr platform to discover, monitor, and protect the hundreds or thousands of Internet of Medical Things (IoMT) devices that populate their networks for the delivery of patient care.

When the full NHS cybersecurity strategy is published later this year, Ordr is confident that our customers will be prepared to meet whatever standards are set as they pertain to protecting connected devices. And as the CISOs and other leaders in those Trusts have already demonstrated a desire to work toward a Zero Trust security posture, there is no doubt they will establish themselves as cybersecurity exemplars for their peer Trusts.

Ordr is also actively working with NHS Trusts to comply with the NHS Data Security Protection Toolkit (DSPT) and  ensure the security and privacy of data shared within the NHS system. Contact us for more information about how we can protect the connected devices in your network.

Kieran Wood

Sales Director – EMEA

Kieran is a UK and EMEA focused sales leader with 20+ years of experience in enterprise infrastructure, storage, cloud services, and cyber security.