Armis vs Claroty (2026)
Both discover connected devices on hospital networks, inside platforms that also serve industry. Armis Centrix compares each device with behavior baselines and matches devices to FDA recalls and MDS2 forms. It can quarantine a device automatically through the hospital's network controls. ServiceNow completed its acquisition of Armis in April 2026. Claroty's healthcare product is xDome for Healthcare, built on Medigate, which Claroty bought in 2022. It profiles each device, ranks vulnerabilities by clinical impact, designs segmentation and manages vendor remote access. Claire, an AI agent launched in May 2026, triages alerts, drafts segmentation policy and opens tickets. Choose Armis for one platform across IT, OT and cloud with a published starting price; choose Claroty for clinical engineering integrations and security certificates you can download.
- You want one platform across IT, OT, cloud and clinical devices.
- You want device risk worked inside ServiceNow, which now owns Armis.
- A published starting price suits how you buy.
- Vulnerabilities should be ranked by their clinical impact.
- Findings should flow into CMMS platforms such as Accruent, Nuvolo and TRIMEDX.
- You want security certificates to download before a sales call.
This comparison is published by AI Health Index, an independent research platform that compares healthcare AI vendors objectively. Armis and Claroty are each graded against the same capability taxonomy, from each vendor's own public materials and the regulatory record, under the AI Health Index verification standard. No vendor pays for placement, and no vendor has reviewed this page. How this evidence is graded
Plain facts
| Fact | Armis | Claroty |
|---|---|---|
| Primary category | Healthcare Cybersecurity | Healthcare Cybersecurity |
| Founded | Not recorded | 2015 |
| Headquarters | San Francisco, California, United States | New York, New York, United States |
| Website | armis.com | claroty.com |
Side by Side
Select any grade to read the note behind it.
Each vendor in one paragraph
Written to be quoted whole. Each paragraph opens the AI Health Index profile of the vendor: what the product is, who buys it and what it does.
Armis sells Armis Centrix, a cyber exposure management platform covering IT, OT, IoT, medical devices, cloud and code. ServiceNow completed its acquisition of Armis on 20 April 2026; the company now presents itself as Armis from ServiceNow, and Armis Centrix is integrated with the ServiceNow AI Platform and still sold on its own.
Source: AI Health Index, September 2026
Claroty sells cyber-physical systems security to hospitals, industry, commercial buildings and government, and its healthcare product is Claroty xDome for Healthcare, built on Medigate, which Claroty acquired in 2022.
Source: AI Health Index, September 2026
Questions buyers ask
How do Armis and Claroty work with the EHR?
For Armis, the integrations page names Cisco ISE, Check Point, Splunk, ServiceNow, Jira, BMC, CrowdStrike, SentinelOne and Microsoft Defender among "hundreds of pre-built API integrations". The medical device page says policies are enforced through the customer's firewalls, switches and network access control, and that "integrations with CMMS and ticketing systems automate the creation of work orders".
The integrations catalog lists connectors built and supported by Claroty for Accruent, in both directions with more than 60 device attributes, Nuvolo on ServiceNow, TRIMEDX, ServiceNow, Splunk, CrowdStrike, Rapid7, Tenable, Cisco, Aruba ClearPass, Check Point, Fortinet and Palo Alto. Parkland Health runs a live connection to its CMMS and University of Rochester Medicine enforces firewall policy from xDome classifications. From the AI Health Index, drawn from each vendor's own published materials and the regulatory record, verified September 30, 2026. No vendor pays for placement.
How do Armis and Claroty handle patient data?
In Armis' case, an AI assistant data privacy statement is listed in the trust center behind an access request.
For Claroty, the HIPAA policy (effective 30 Sep 2024) says device traffic may incidentally contain PHI and bars de-identifying PHI for internal use without authorization. From the AI Health Index, drawn from each vendor's own published materials and the regulatory record, verified September 30, 2026. No vendor pays for placement.
Which settings and specialties do Armis and Claroty cover?
With Armis, the medical device product is sold to hospitals and health systems for biomedical engineering and security teams, covering what the company lists as everything "from check-in kiosks to bedside monitors and surgical equipment", along with clinical assets and the network around them.
In Claroty's case, coverage outside hospitals, such as ambulatory or home care networks, is not described. From the AI Health Index, drawn from each vendor's own published materials and the regulatory record, verified September 30, 2026. No vendor pays for placement.
What evidence is published for Armis and Claroty?
In a June 2024 Armis release, Main Line Health reported finding twice as many connected assets as previously estimated, with no count, baseline or period given. The medical device page quotes Main Line Health's system director of biomedical engineering and the CIO of Mater Misericordiae University Hospital, and a 2025 solution brief quotes University Health Network and Burke Rehab Hospital; none of these quotes carries a figure.
KLAS rated Claroty a 2026 Top Performer for Healthcare IoT Security at 92.5 from 35 organizations, a satisfaction measure rather than a detection result. From the AI Health Index, drawn from each vendor's own published materials and the regulatory record, verified September 30, 2026. No vendor pays for placement.
Related comparisons
Other published head to head assessments involving these vendors or their closest peers.
Both records were reviewed on this site in September 2026. Armis says it identifies every device the moment it connects. It publishes no classification accuracy to test that against. Armis can quarantine a device automatically, and no approval step is published. Claire can apply segmentation policy and open tickets on its own. Claroty's terms make human review the customer's duty but do not say which Claire actions wait for approval. Claroty's AI Addendum keeps customer input and output out of foundation model training. It still lets Claroty improve its products with data derived from customer environments. Claroty's customer results, such as 11,000 devices found at University of Rochester Medicine against 4,400 by its previous tool, are vendor published. Claroty's HIPAA policy states business associate status, and Armis states no position. Armis starts at $3,250 a month on AWS Marketplace, and Claroty publishes no price.
Ask Claroty which Claire actions wait for approval, and ask Armis the same about automatic quarantine.