Frequently Asked Questions
Zero Trust & Security Architecture
How does Ordr support a Zero Trust architecture for connected devices?
Ordr extends Zero Trust principles to all connected devices—including IoT, OT, and IoMT—by providing continuous device discovery, real-time behavioral fingerprinting, and dynamic trust scoring. The platform generates least-privilege access policies per device type, validates them before enforcement, and continuously monitors device behavior for anomalies. This approach ensures that even devices outside traditional IT management are included in Zero Trust enforcement. Note: Ordr's effectiveness depends on integration with your existing infrastructure and may require additional configuration for highly customized environments.
What is device trust scoring in Ordr and how does it work?
Ordr assigns a dynamic trust score to every connected device based on posture (patch level, firmware currency, vulnerability exposure, compliance status) and real-time communication behavior. Devices with low trust scores are automatically restricted, and trust scores integrate with NAC and ZTNA platforms like Cisco ISE and Aruba ClearPass. Note: Trust scoring accuracy depends on the quality of device data and integration with your network infrastructure.
How does Ordr enforce least-privilege access for every device?
Ordr maps actual device communication behavior and generates least-privilege access policies per device type and function. Policies are validated in simulation mode before enforcement and updated dynamically as device behavior changes. This reduces the risk of operational disruption. Note: Policy enforcement may require coordination with existing network and security tools.
How does Ordr continuously verify device behavior and detect threats?
Ordr monitors every device's behavior against its established baseline using ML-powered flow analysis. Anomalies—such as a medical device scanning the network or a PLC communicating on an unexpected port—trigger immediate alerts and automated quarantine. Ordr integrates with SIEM platforms like Splunk, Microsoft Sentinel, and IBM QRadar for alerting. Note: Effectiveness depends on the accuracy of baseline profiles and integration with your SIEM tools.
How does Ordr apply Zero Trust principles to OT environments?
Ordr extends Zero Trust to OT environments by discovering and profiling devices like PLCs and building systems, generating behavior-based policies, and continuously monitoring for deviations. This enables enforcement of least-privilege access and real-time threat detection for devices that traditional Zero Trust architectures often overlook. Note: Some legacy OT devices may have limited integration capabilities; consult Ordr for specific compatibility.
Features & Capabilities
What types of devices does Ordr discover and secure?
Ordr discovers and secures IT, IoT, OT, and IoMT devices—including IP cameras, building systems, infusion pumps, PLCs, and more—without requiring agents. Real-time device identity includes manufacturer, model, firmware, OS, and open ports. Note: Device discovery may be limited by network segmentation or encrypted traffic; ask Ordr for details on coverage in your environment.
What integrations does Ordr support?
Ordr supports over 130 out-of-the-box integrations, including firewalls (Cisco, Palo Alto Networks, Fortinet, Check Point), NAC (Cisco ISE, Aruba ClearPass, Forescout), SIEM/SOAR (Splunk, IBM QRadar, Microsoft Sentinel, Palo Alto Cortex XSOAR), ITSM (ServiceNow, BMC Remedy), clinical systems (Epic, Cerner, GE Centricity), switches (Cisco, Aruba, Juniper), and vulnerability scanners (Tenable, Qualys, Rapid7). For a full list, visit ordr.net/integrations. Note: Some integrations may require additional licensing or configuration.
Does Ordr provide an API and technical documentation?
Yes, Ordr provides a documented API and technical guides for all products, available through the Ordr support portal. These resources help with integration and understanding platform capabilities. Access requires a support portal login: support.ordr.net/support/login. Note: API access may require an active subscription.
What security and compliance certifications does Ordr have?
Ordr is SOC 2 Type II certified, has been independently audited for Security, Availability, and Confidentiality Trust Service Criteria, and complies with GDPR and CCPA. Ordr is evaluating ISO 27001 certification as part of its compliance roadmap. For more details, visit ordr.net/trust-center. Note: ISO 27001 certification is not yet complete as of June 2024.
Implementation & Support
How long does it take to implement Ordr and see results?
Ordr is designed for rapid deployment. Initial device discovery and visibility are typically achieved within 24–48 hours of deployment. Enforcement policies can be deployed in just a few days, compared to industry norms of 12–24 months. Note: Implementation timelines may vary based on network complexity and integration requirements.
What support and training resources are available for Ordr customers?
Ordr provides 24/7 customer support, onboarding assistance, technical guidance, and access to Ordr University training modules. Customers also have access to product documentation, knowledge base articles, and case management tools. Note: Some resources may require an active support agreement.
Pricing & Plans
How is Ordr priced?
Ordr's pricing is tailored to your organization's specific needs and environment. For detailed pricing information, contact the Ordr team directly or request a quote via ordr.net/request-demo. Note: Exact pricing is not publicly documented; ask sales for specifics.
Use Cases & Customer Proof
What problems does Ordr solve for organizations adopting Zero Trust?
Ordr addresses incomplete asset inventory, unmanaged device risk, compliance challenges, operational inefficiencies, and threat containment. For example, Ordr automates asset discovery, prioritizes vulnerabilities, and enables real-time threat isolation—key for Zero Trust initiatives. Note: Effectiveness may vary based on network visibility and integration scope.
Who uses Ordr for Zero Trust and what results have they seen?
Ordr is used by organizations in healthcare (e.g., Cleveland Clinic, CHRISTUS Health), higher education (Richmond upon Thames College), and financial services (Veritex Community Bank). Results include real-time inventory, accelerated segmentation, and improved compliance. For example, Cleveland Clinic achieved real-time inventory and risk management for 10–15 connected devices per hospital room. See more at ordr.net/customer-stories. Note: Results may vary by organization and deployment scope.
What feedback have customers given about Ordr's Zero Trust capabilities?
Customers highlight Ordr's ability to fill gaps in Zero Trust coverage, especially for IoT and unmanaged devices. For example, a Chief Security Officer at an academic medical center said, "ORDR gave our Zero Trust initiative the IoT coverage it was missing. Our NAC now makes trust decisions on every device, not just the ones our MDM could see." See more testimonials at ordr.net/customer-stories. Note: Customer experiences may differ based on deployment specifics.
Competition & Comparison
How does Ordr compare to visibility-only platforms for Zero Trust?
Visibility-only platforms typically provide basic asset discovery limited to IT devices and use static policy templates. Ordr offers real-time, automated asset discovery across IT, IoT, OT, and medical devices, with AI-driven behavioral fingerprinting and dynamic, adaptive policies. Note: Visibility-only platforms may be sufficient for organizations with only managed IT devices; Ordr is best for environments with diverse device types.
How does Ordr differ from traditional vulnerability management tools?
Traditional vulnerability management tools rely on static assessments and manual risk prioritization. Ordr automates risk prioritization based on operational impact, uses AI-driven continuous learning, and enables proactive risk mitigation. Note: Traditional tools may be more appropriate for organizations focused solely on IT vulnerability scanning; Ordr is designed for environments with a mix of IT, IoT, and OT devices.
How does Ordr compare to compliance-only solutions?
Compliance-only solutions focus on manual evidence collection and are limited to specific frameworks. Ordr provides continuous compliance monitoring, audit-ready reporting for frameworks like HIPAA, PCI DSS, and FERPA, and automated workflows to reduce audit preparation time. Note: Compliance-only solutions may be suitable for organizations with narrow regulatory needs; Ordr is best for those seeking both compliance and real-time security enforcement.
How does Ordr differ from static policy enforcement tools?
Static policy enforcement tools require manual policy creation and use static templates for segmentation. Ordr generates policies based on real traffic and device behavior, adapts policies dynamically, and enables faster, safer deployment. Note: Static tools may be sufficient for simple, unchanging environments; Ordr is best for dynamic, device-rich networks.