[Home](https://cybersectools.com/) / [Categories](https://cybersectools.com/categories) / Cyber-Physical Security

# Cyber-Physical Security Solutions 2026

Cyber-Physical Security covers the solutions that protect the systems where software meets the physical world: operational technology, industrial control systems, IoT and embedded devices, and the critical infrastructure they run. You reach for it once your risk surface stops being data and starts being a turbine, a PLC, a building automation controller, or an infusion pump, where the wrong packet can halt a process line or hurt someone. The space breaks into distinct problems. OT Asset Discovery and OT Network Segmentation give you the inventory and the boundaries that IT solutions cannot, because an IT scanner would crash a fragile controller on contact. Industrial Control System Security, SCADA Security, and OT Vulnerability Management handle plant-floor protocols and the patch-cycle reality of equipment that runs for twenty years. CPS Protection frames the broader cross-domain risk, while IoT Security, Firmware and Embedded Security, and Medical Device Security each address a fleet of connected devices with their own constraints. Most security leaders assemble coverage across several of these, because the OT environment, the connected-device estate, and the firmware supply chain rarely answer to one platform.

267 commercial products · 9 specializations · [What is Cyber-Physical Security?](https://cybersectools.com/glossary/ot-security)

Specializations: [OT Asset Discovery](https://cybersectools.com/categories/asset-discovery) · [ICS Security](https://cybersectools.com/categories/ics-security) · [OT Network Segmentation](https://cybersectools.com/categories/ot-segmentation) · [OT Vulnerability Management](https://cybersectools.com/categories/ot-vulnerability-management) · [SCADA Security](https://cybersectools.com/categories/scada-security) · [CPS Protection](https://cybersectools.com/categories/cps-protection) · [IoT Security](https://cybersectools.com/categories/iot-security) · [Firmware & Embedded Security](https://cybersectools.com/categories/firmware-embedded-security) · [Medical Device Security](https://cybersectools.com/categories/medical-device-security)

## Featured on CybersecTools

Paid placement: Featured vendors pay for a plan and show first. The shortlist positions are earned. [How we label paid slots](https://cybersectools.com/methodology)

- [Strike48 Platform](https://www.strike48.com/platform?utm_source=cybersectools.com&utm_medium=featured) (Featured): Security Operations
- [SecureIntent](https://secureintent.ai/?utm_source=cybersectools.com&utm_medium=featured) (Featured): Data Protection
- [Fortra](https://www.fortra.com/?utm_source=cybersectools.com&utm_medium=featured) (Featured): Data Protection
- [Lunar](https://lunarcyber.com/?utm_source=cybersectools.com&utm_medium=featured) (Featured): Threat Intelligence
- [Hudson Rock](https://www.hudsonrock.com/?utm_source=cybersectools.com&utm_medium=featured) (Featured): Threat Intelligence
- [Daylight Security](https://daylight.ai/?utm_source=cybersectools.com&utm_medium=featured) (Featured): Security Operations

The shortlist

## [Best OT Security Solutions for Business](https://cybersectools.com/shortlists/best-ot-security-solutions)

1. Claroty Platform
2. Nozomi Networks Platform
3. Dragos Platform Asset Visibility
[and 4 more](https://cybersectools.com/shortlists/best-ot-security-solutions)

Reviewed by [Nika (Nikoloz) Kokhreidze](https://cybersectools.com/about). Updated 2026-11-02.

[Read the Cyber-Physical Security shortlist](https://cybersectools.com/shortlists/best-ot-security-solutions)

## Compare in Cyber-Physical Security

The most-opened side-by-side pages for Cyber-Physical Security solutions.

- [CrowdStrike Falcon for XIoT vs Nozomi Networks Platform](https://cybersectools.com/compare/crowdstrike-falconr-for-xiot-vs-nozomi-networks-nozomi-networks-platform)
- [Binarly vs Eclypsium Supply Chain Security Platform](https://cybersectools.com/compare/binarly-vs-eclypsium-supply-chain-security-platform)
- [Cybellum Product Security Platform vs Finite State Platform](https://cybersectools.com/compare/cybellum-product-security-platform-vs-finite-state-platform)
- [Dispel Wicket Industrial Gateway vs Dispel Zero Trust Engine](https://cybersectools.com/compare/dispel-wicket-industrial-gateway-vs-dispel-zero-trust-engine)
- [Armis Threat Detection and Analysis vs Dragos Platform Asset Visibility](https://cybersectools.com/compare/armis-threat-detection-and-analysis-vs-dragos-platform-asset-visibility)
- [Binarly vs Finite State Platform](https://cybersectools.com/compare/binarly-vs-finite-state-platform)

## The Cyber-Physical Security market

Company data as of 2026-11-04

- 167 companies sell in this market
- $1.1B raised in 26 rounds in the last 12 months
- 7 acquired in the last 12 months
- 15 founded in the last two years

[Explore the Cyber-Physical Security market on Mandos](https://mandos.io/data/companies?utm_source=cybersectools.com&utm_medium=category&utm_campaign=ot-security)

## Cyber-Physical Security solutions

All 287 · Free 20 · Commercial 267

265. [HiveMQ Platform](https://cybersectools.com/tools/hivemq-hivemq-platform) (Industrial Control System Security): Industrial data platform for streaming operational data using MQTT protocol
266. [Cyolo Remote Privileged Access](https://cybersectools.com/tools/cyolo-remote-privileged-access) (Industrial Control System Security): Remote privileged access solution for OT/ICS and cyber-physical systems
267. [Nozomi Networks Platform](https://cybersectools.com/tools/nozomi-networks-nozomi-networks-platform) (CPS Protection): OT/IoT/IT asset discovery & threat detection platform for cyber-physical systems
268. [TXOne OT Security Platform](https://cybersectools.com/tools/txone-ot-security) (Industrial Control System Security): OT zero trust security platform for industrial control systems
269. [Finite State Platform](https://cybersectools.com/tools/finite-state-platform) (Firmware & Embedded Security): Platform for vulnerability detection in firmware, binaries, and SBOMs
270. [AVEVA](https://cybersectools.com/tools/aveva) (Industrial Control System Security · Free): AVEVA is an industrial software provider offering engineering, operations, and data management solutions for operational technology environments across various industrial sectors.
271. [Siemens Simatic PCS 7 Hardening Tool Version 1.0](https://cybersectools.com/tools/siemens-simatic-pcs-7-hardening-tool-version-10) (OT Vulnerability Management · Free): A PowerShell security assessment script that evaluates Siemens SIMATIC PCS 7 industrial control systems for security misconfigurations and vulnerabilities.
272. [ICSREF](https://cybersectools.com/tools/icsref) (Industrial Control System Security · Free): ICSREF is a modular framework that automates reverse engineering of CODESYS industrial control system binaries to identify functions, library calls, and program structures.
273. [ModbusPal](https://cybersectools.com/tools/modbuspal) (Industrial Control System Security · Free): Java MODBUS simulator with scriptable functions and dynamic resource creation.
274. [Kamerka](https://cybersectools.com/tools/kamerka) (OT Asset Discovery · Free): Ultimate Internet of Things/Industrial Control Systems reconnaissance tool powered by Shodan.
275. [mbtget](https://cybersectools.com/tools/mbtget) (Industrial Control System Security · Free): Simple perl script for making Modbus transactions from the command line.
276. [GRASSMARLIN](https://cybersectools.com/tools/grassmarlin) (OT Asset Discovery · Free): Passively maps and visually displays ICS/SCADA network topology for network security
277. [sixnet-tools](https://cybersectools.com/tools/sixnet-tools) (SCADA Security · Free): Python exploitation tool for gaining root access to Sixnet RTUs in SCADA networks by exploiting application-level vulnerabilities.
278. [ICSFuzz](https://cybersectools.com/tools/icsfuzz) (Industrial Control System Security · Free): PLC-side fuzzing tool for uncovering vulnerabilities in ICS control applications.
279. [Moki Linux](https://cybersectools.com/tools/moki-linux) (Industrial Control System Security · Free): A customized Kali Linux distribution for ICS/SCADA pentesting professionals
280. [s7scan](https://cybersectools.com/tools/s7scan) (OT Asset Discovery · Free): A tool for scanning networks, enumerating Siemens PLCs, and gathering detailed information about them.
281. [HVAC Traces](https://cybersectools.com/tools/hvac-traces) (Industrial Control System Security · Free): Repository of pcap traces for evaluating Network Intrusion Detection Systems in HVAC systems.
282. [ics_mem_collect](https://cybersectools.com/tools/icsmemcollect) (Industrial Control System Security · Free): Developing APIs to access memory on industrial control system devices.
283. [Redpoint](https://cybersectools.com/tools/redpoint) (OT Asset Discovery · Free): A Digital Bond research project to enumerate ICS applications and devices
284. [CHIPSEC](https://cybersectools.com/tools/chipsec) (Firmware & Embedded Security · Free): CHIPSEC is a cross-platform framework for analyzing PC platform security, including hardware, BIOS/UEFI firmware, and low-level system components.
285. [ICS-pcap](https://cybersectools.com/tools/ics-pcap) (Industrial Control System Security · Free): A collection of PCAPs for ICS/SCADA utilities and protocols with the option for users to contribute.
286. [Binwalk](https://cybersectools.com/tools/binwalk) (Firmware & Embedded Security · Free): Binwalk is a firmware analysis tool that enables reverse engineering and extraction of embedded file systems and archives from firmware images.
287. [Hardware Security Validation Environment](https://cybersectools.com/tools/hardware-security-validation-environment) (Firmware & Embedded Security · Free): A hardware security validation toolkit for x86 platforms that provides bootable tools for checking platform configuration registers and managing SecureBoot keys.

Page 12 of 12. Previous: https://cybersectools.com/categories/ot-security.md?page=11

## Cyber-Physical Security Specializations

267 commercial products across 9 specializations. 20 free products are listed under [Free solutions](https://cybersectools.com/free)

- [OT Asset Discovery](https://cybersectools.com/categories/asset-discovery): OT asset discovery solutions for identifying and inventorying industrial control systems, IoT devices, and operational technology assets.
- [ICS Security](https://cybersectools.com/categories/ics-security): Protecting ICS, SCADA and PLC environments: OT threat detection and network monitoring, OT asset visibility, OT incident response, industrial EDR.
- [OT Network Segmentation](https://cybersectools.com/categories/ot-segmentation): Separating and controlling OT/ICS networks: industrial firewalls, data diodes and unidirectional gateways, cross-domain solutions, OT microsegmentation.
- [OT Vulnerability Management](https://cybersectools.com/categories/ot-vulnerability-management): Finding and prioritizing vulnerabilities and risk in OT/ICS/IoT assets, including OT risk assessment and OT cyber risk quantification.
- [SCADA Security](https://cybersectools.com/categories/scada-security): SCADA security solutions for protecting supervisory control and data acquisition systems from cyber attacks and unauthorized access.
- [CPS Protection](https://cybersectools.com/categories/cps-protection): Unified platforms securing cyber-physical assets across OT, IoT and medical devices, including OT secure remote access and vehicle / fleet security.
- [IoT Security](https://cybersectools.com/categories/iot-security): Securing IoT and IIoT devices and their connectivity: device identity and certificates for IoT, IoT monitoring and protection.
- [Firmware & Embedded Security](https://cybersectools.com/categories/firmware-embedded-security): Securing the software inside devices: firmware analysis and SBOMs for devices, secure boot, embedded runtime protection, product security for device makers.
- [Medical Device Security](https://cybersectools.com/categories/medical-device-security): Medical device security platforms for protecting connected healthcare devices and clinical cyber-physical systems.

## How to choose Cyber-Physical Security solutions

- Confirm it is genuinely passive where it needs to be. OT and medical environments cannot tolerate active scanning that crashes a controller, so verify it fingerprints assets from network traffic and protocol parsing rather than probing live equipment.
- Check protocol and device coverage against your real environment: Modbus, DNP3, EtherNet/IP, PROFINET, S7, and BACnet for OT, plus the specific PLC, RTU, and embedded vendors you run. Generic IoT coverage misses the plant floor entirely.
- Match the solution to a specific job: inventory and discovery, segmentation and monitoring, vulnerability management, or device and firmware analysis. A platform that claims all of it usually nails discovery and treats the rest shallowly.
- Look at how it handles the patch-cycle reality of OT. Equipment that runs for decades and cannot reboot on demand needs compensating controls and virtual patching, not a CVE list you can never act on.
- Verify it feeds your existing stack instead of becoming a parallel silo. Alerts should land in your SIEM and SOC workflow, and asset data should reconcile with your IT inventory so OT and IT risk live in one picture.
- For regulated sites, confirm it maps to the frameworks your auditors use, such as IEC 62443, NERC CIP, or FDA premarket guidance for medical devices, with evidence and reporting behind the dashboard.

## Articles about Cyber-Physical Security

Shortlists, buying guides and market analysis from our resource library.

- [Best OT Security Solutions for Business](https://cybersectools.com/shortlists/best-ot-security-solutions): Compare 7 OT security solutions, like Claroty, Nozomi Networks and Dragos, on asset discovery, threat detection and exposure management.

## Cyber-Physical Security Solutions FAQ

Common questions about Cyber-Physical Security solutions: how to choose, pricing and comparisons.

### What is Cyber-Physical Security?

Cyber-Physical Security is the practice and solutions for protecting systems where software controls physical processes: operational technology, industrial control systems, SCADA, IoT and embedded devices, and the critical infrastructure they run. It covers asset discovery, network segmentation, vulnerability management, and firmware analysis for equipment that traditional IT security cannot safely touch. The aim is to keep these environments visible, monitored, and resilient without disrupting the process they control.

### How is OT and cyber-physical security different from regular IT security?

IT security optimizes for confidentiality and can patch and reboot on a schedule. Cyber-physical systems optimize for availability and safety, run for decades on fragile protocols, and often cannot be patched or actively scanned without risking the process. The stakes shift from data loss to physical harm and downtime, which is why this category leans on passive monitoring, segmentation, and compensating controls rather than the agent-and-scan model IT systems assume.

### Which Cyber-Physical Security subcategory should I start with?

Start with visibility. OT Asset Discovery tells you what is actually on the network, which nearly every program finds is more than the documentation claims. From there, OT Network Segmentation and ICS or SCADA Security let you contain and monitor the environment, while OT Vulnerability Management prioritizes what little you can realistically fix. If your exposure is a connected-device estate or medical equipment, IoT Security and Medical Device Security come first instead.

### How is this different from IoT security on its own?

IoT Security is one subcategory inside the broader cyber-physical space, focused on the connected-device estate: cameras, sensors, building systems, and consumer-grade gear bridging into the network. Cyber-Physical Security also spans industrial control and SCADA on the plant floor, firmware and embedded analysis at the chip and bootloader level, and medical devices in clinical settings. The threats and constraints differ enough that most teams need coverage across several, not a single IoT solution.

### Can my existing IT security stack cover OT and connected devices, or do I need dedicated solutions?

Your IT stack covers the corporate network around these systems but not the systems themselves. Endpoint agents will not install on a PLC, IT vulnerability scanners can crash a controller, and your SIEM does not parse industrial protocols. Dedicated cyber-physical solutions fill that gap with passive discovery, protocol-aware monitoring, and OT-safe vulnerability management, then feeds the results back into the SOC workflow you already run.

---

Source: https://cybersectools.com/categories/ot-security?page=12

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md.

More on the Cyber-Physical Security vendors: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=category-md