Claroty CTD
Claroty CTD: A broad on-premises OT monitoring platform for asset visibility, detection, and exposure management. Ranked #5 of 19 in OT and ICS Security Monitoring Software by our editors (8.9/10); pricing: Pricing on request; best for on-premises OT security teams.
At a glance
- Editor score8.9 / 10
- PricingPricing on request
- Best forOn-premises OT security teams
- DeploymentOn_premises
- Founded2015 · New York City, New York, United States
- Facts checked20 Sep 2026

Where it wins
- Passive monitoring avoids generating additional OT network traffic.
- Combines passive, active, and AppDB asset discovery.
- Supports 450+ industrial protocols and SIEM integrations.
Where it doesn't
- Deployment is on-premises rather than cloud-based.
- Pricing requires contacting Claroty sales.
- Its broad feature set may exceed narrow monitoring needs.
Our verdict on Claroty CTD
Claroty Continuous Threat Detection (CTD) is an on-premises cybersecurity platform for industrial, government, and other operational technology environments. It is designed for OT security teams that need asset inventory, network monitoring, threat detection, exposure management, and virtual segmentation oversight in sensitive or air-gapped environments. CTD combines passive monitoring with active and AppDB discovery, helping organizations maintain a centralized view of OT and XIoT assets without generating additional traffic through passive monitoring. Claroty also describes mobile-ready deployments for federal OT use cases, while the product remains categorized as on-premises.
Its strongest differentiator is the breadth of OT visibility and detection capabilities in one platform. Behavioral baselining and anomaly detection complement real-time threat detection and contextualized alert timelines, while exposure and vulnerability management uses CVE and protocol data. Virtual network zones and segmentation policy monitoring add a layer for reviewing how operational environments are organized. Protocol coverage includes Modbus, DNP3, CIP, OPC UA, and more than 450 industrial protocols, making CTD suited to varied industrial environments rather than a narrow protocol footprint.
CTD also fits teams that need to connect OT monitoring with existing security operations or industrial management systems. Listed integrations include LogRhythm SIEM, RSA NetWitness SIEM, FortiSIEM, Splunk, Palo Alto Networks Panorama, AUVESY versiondog, and Rockwell Automation AssetCentre. Pricing follows a contact-sales model, so buyers should expect a sales-led evaluation rather than self-serve plan selection. Choose CTD when on-premises deployment, broad asset discovery, protocol coverage, and integration with security infrastructure are priorities; teams seeking a cloud-only or narrowly focused monitoring tool should look elsewhere.
Your product? Our editors can test Claroty CTD in depth and publish a review, labelled as paid · from $149/mo →
Claroty CTD pricing
Claroty CTD fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Not verified |
| Deployment | On_premises |
| Passive monitoring | Yes |
| OT asset discovery | Yes |
| Supported protocols | Modbus, DNP3, CIP, OPC UA, 450+ industrial protocols |
| Asset limit | Not verified |
| SIEM integration | Yes |
| Deployment | Self-hosted |
| Support | Tickets |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 7 integrations: LogRhythm SIEM, RSA NetWitness SIEM, FortiSIEM, Splunk, Palo Alto Networks Panorama, AUVESY versiondog … See all → |
| Pricing | Pricing on request |
| Website | claroty.com |
| Facts checked | 20 Sep 2026 |
Claroty CTD integrations
Claroty CTD lists 7 integrations on its own site.
- LogRhythm SIEM
- RSA NetWitness SIEM
- FortiSIEM
- Splunk
- Palo Alto Networks Panorama
- AUVESY versiondog
- Rockwell Automation AssetCentre
See all Claroty CTD integrations →
Alternatives to Claroty CTD
- Dragos PlatformA broad OT monitoring platform for threat intelligence, vulnerability management, and response.9.4
- Armis Centrix for OT/IoT SecurityA broad agentless platform for discovering, monitoring, and prioritizing OT/IoT risk.9.3
- Nozomi Networks PlatformBroad monitoring, discovery, anomaly detection, and integrations for mixed OT and IoT estates.9.2
See all Claroty CTD alternatives →
Claroty CTD vs the competition
- Claroty CTD vs Dragos Platform
- Claroty CTD vs Armis Centrix for OT/IoT Security
- Claroty CTD vs Nozomi Networks Platform
- Claroty CTD vs Tenable One OT Exposure
- Claroty CTD vs Kaspersky Industrial CyberSecurity Platform
- Claroty CTD vs OTDefend
Compare Claroty CTD with any tool side by side →
Used Claroty CTD? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Claroty CTD for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Claroty CTD is listed in our OT and ICS Security Monitoring Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/claroty-ctd/"><img src="https://www.itechguides.com/best/badge/claroty-ctd.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update


