Asset-intelligence platform that grew into exposure management, strongest where the estate includes OT, medical devices and unmanaged IoT. Prioritisation and remediation workflow are mature; adversarial validation is not native.
Armis built its reputation on passive network discovery of devices that agents never see: industrial controllers, medical equipment, building systems, unmanaged IoT. Armis Centrix wraps that asset intelligence in exposure management, adding ingestion from what the vendor describes as hundreds of third-party tools so scanner, cloud and application findings land in the same place as the passive inventory.
Discovery is the standout. The passive engine plus selective safe active queries covers device classes that most exposure platforms treat as blind spots, and the vendor claims a device knowledge base numbering in the billions. If your risk sits in operational technology rather than servers, this is a different conversation from the scanner-first platforms.
Prioritisation and mobilisation come largely from the Silk Security acquisition in April 2024, now sold as VIPR Pro. It deduplicates findings across tools, assigns owners, pushes bidirectional tickets to Jira and ServiceNow, and tracks remediation against service level agreements. This is the part most vulnerability management teams will feel immediately.
Validation is the gap. The vulnerability management module launched in March 2026 actively queries devices to confirm a vulnerability is present, and threat intelligence shows whether an exploit exists in the wild, but neither tests exploitability in your environment. There is no breach and attack simulation or automated penetration testing module. Pair it with a validation tool if that stage matters.
Check in a demo: how VIPR Pro and the newer vulnerability management module overlap and which one your team would actually live in, since ServiceNow closed its acquisition of Armis in April 2026 and the roadmap for both products under ServiceNow SecOps is not yet public.
Weak in one of these stages? The self-assessment tells you which stage to shop for first, and the directory shows who covers it.
Claim or correct this listing
Tell us what is wrong or what you want to confirm, and link a public source we can check. The owner reviews every claim. Nothing changes on the site until it has been reviewed, and a claim never changes a score or placement.
Get vendor updates monthly
One email a month: what changed in exposure management, which vendors moved, and one thing worth doing. No spam, unsubscribe any time.