Armis vs Cylera (2026)
Both find and classify connected devices on hospital networks without installing agents. Armis Centrix covers IT, OT, IoT, cloud and code as well as medical devices. It matches devices to FDA recalls and MDS2 forms and can quarantine one automatically through the hospital's network controls. ServiceNow completed its acquisition of Armis in April 2026. Cylera began in hospitals and now serves other sectors as well. Its distinguishing technique is network traffic emulation. It builds virtual copies of devices from their traffic and runs vulnerability tests against those instead of the live equipment. A policy generator writes segmentation rules, and utilization analytics serve biomedical engineering. Choose Armis for breadth, a stated hosting model and a published starting price; choose Cylera to test device vulnerabilities on emulated copies rather than devices in clinical use.
- You want one platform across IT, OT, cloud and clinical devices.
- You need a stated hosting region or an on premises install.
- Your security review expects SOC 2 and FedRAMP Moderate on a trust center.
- Vulnerability tests should run on emulated devices, not live ones.
- Biomedical engineering wants device utilization analytics.
- You report against the NHS Data Security and Protection Toolkit as well as US rules.
This comparison is published by AI Health Index, an independent research platform that compares healthcare AI vendors objectively. Armis and Cylera are each graded against the same capability taxonomy, from each vendor's own public materials and the regulatory record, under the AI Health Index verification standard. No vendor pays for placement, and no vendor has reviewed this page. How this evidence is graded
Plain facts
| Fact | Armis | Cylera |
|---|---|---|
| Primary category | Healthcare Cybersecurity | Healthcare Cybersecurity |
| Headquarters | San Francisco, California, United States | New York, New York, United States |
| Website | armis.com | cylera.com |
Side by Side
Select any grade to read the note behind it.
Each vendor in one paragraph
Written to be quoted whole. Each paragraph opens the AI Health Index profile of the vendor: what the product is, who buys it and what it does.
Armis sells Armis Centrix, a cyber exposure management platform covering IT, OT, IoT, medical devices, cloud and code. ServiceNow completed its acquisition of Armis on 20 April 2026; the company now presents itself as Armis from ServiceNow, and Armis Centrix is integrated with the ServiceNow AI Platform and still sold on its own.
Source: AI Health Index, September 2026
Cylera sells an IoT asset intelligence and security platform that began in hospitals and now also serves finance, higher education, transportation, manufacturing and energy. Collection is agentless and passive, extracting device context from known and unknown protocols. Its distinguishing technique is network traffic emulation: the platform builds virtual stand-ins for devices from their traffic and probes those instead of the live equipment, so vulnerability testing never touches a device in clinical use.
Source: AI Health Index, September 2026
Questions buyers ask
How do Armis and Cylera work with the EHR?
For Armis, the integrations page names Cisco ISE, Check Point, Splunk, ServiceNow, Jira, BMC, CrowdStrike, SentinelOne and Microsoft Defender among "hundreds of pre-built API integrations". The medical device page says policies are enforced through the customer's firewalls, switches and network access control, and that "integrations with CMMS and ticketing systems automate the creation of work orders".
With Cylera, integration pages and solution briefs cover Cisco ISE, Prime and DNA Center, Aruba ClearPass, Extreme NAC, Forescout, Illumio, Check Point, SonicWall, Microsoft Sentinel, Google Chronicle, IBM QRadar, Splunk, Rapid7 InsightVM, ServiceNow, Nuvolo and Integra e-Quip. No named hospital is shown running a two-way CMMS integration. From the AI Health Index, drawn from each vendor's own published materials and the regulatory record, verified September 30, 2026. No vendor pays for placement.
How are Armis and Cylera priced and sold?
The AWS Marketplace listing for the Armis Device Security Platform, sold by Armis, shows a "Centrix Standard minimum" of $3,250 per month on 1, 12, 24 or 36 month terms, billed on the assets and devices monitored, managed and unmanaged, including medical equipment, with private offers by email.
For Cylera, the platform is sold through demos, a product tour and channel partners in North America, the UK and Europe. From the AI Health Index, drawn from each vendor's own published materials and the regulatory record, verified September 30, 2026. No vendor pays for placement.
How do Armis and Cylera handle patient data?
With Armis, an AI assistant data privacy statement is listed in the trust center behind an access request.
In Cylera's case, the privacy statements cover website visitors only. From the AI Health Index, drawn from each vendor's own published materials and the regulatory record, verified September 30, 2026. No vendor pays for placement.
Which settings and specialties do Armis and Cylera cover?
For Armis, the medical device product is sold to hospitals and health systems for biomedical engineering and security teams, covering what the company lists as everything "from check-in kiosks to bedside monitors and surgical equipment", along with clinical assets and the network around them.
With Cylera, the platform covers medical devices, OT and IoT for hospitals and health networks in North America and Europe, with roles for biomedical engineering, IT and security, and it now also sells to finance, higher education, transportation, manufacturing and energy. From the AI Health Index, drawn from each vendor's own published materials and the regulatory record, verified September 30, 2026. No vendor pays for placement.
Related comparisons
Other published head to head assessments involving these vendors or their closest peers. The full set for this category is on the Healthcare Cybersecurity page.
Both records were reviewed on this site in September 2026. Armis says it identifies every device the moment it connects. It publishes no classification accuracy to test that against. Armis can quarantine a device automatically, and no approval step is published. Cylera enrolls new devices into segmentation policy automatically, and no approval step is published there either. Cylera publishes no security attestation, product privacy terms, business associate position or hosting model. Its privacy statements cover the website, not the product. Its case studies sit behind download forms. Its home page lists improvements without figures. Armis starts at $3,250 a month on AWS Marketplace, and Cylera publishes no price.
Ask Cylera how closely an emulated device matches the real one, and ask Armis what approval an automatic quarantine needs.