See Every Thing^™

Other Products

Agent-based security
(endpoint protection, EDR, etc.)

• Only effective on endpoints that can accept an agent (“managed” endpoints)

• 100% agentless
• Effective on managed, unmanaged, and IoT endpoints

Network Access Control (NAC)

• Discovers devices on the enterprise network only
• Can’t assess risk of unmanaged devices
• Can’t detect threats
• No (or limited) device knowledgebase
• Difficult to deploy and manage

• Discovers devices on the network and in the airspace
• Assesses the risk of all devices – managed and unmanaged
• Detects threats
• Huge device knowledgebase (8 million different device profiles)
• Far easier to deploy than NAC

Network Scanning Tools

• Good for managed computers
• Can disrupt or crash many types of unmanaged devices
• Can miss devices located in unknown network segments or hidden behind firewalls

• 100% passive monitoring. No scans. No disruption.
• Effective for managed and unmanaged devices
• 100% comprehensive coverage, regardless of network topology

Network Firewall

• Protects the network perimeter and core
• Focused on network traffic, not devices
• No device knowledgebase, so unable to detect anomalous behavior

• Protects devices at the access layer
• Focused on device state and behavior
• Extensive cloud-based, crowd sourced knowledgebase provides deep understanding of appropriate (and inappropriate) device behavior

SIEM

• Analyzes logs produced by managed devices
• Blind to unmanaged and IoT devices which do not produce logs

• Does not rely on logs
• Directly assesses risks and detects threats of all devices
• Integrates into and complements SIEMs

Network Traffic Analysis (NTA)

• Does not provide asset inventory (device discovery)
• Does not assess the risk of devices
• Fails to detect policy violations

• Armis generates a complete inventory of hardware and software
• Armis generates a risk assessment for every device
• Armis can detect policy violations and other forms of inappropriate behavior.