Armis

Deliberate B, applying the same reasoning used for Nanox.AI, graded down because it is one line of a larger business. The analytical work is real: Armis Centrix correlates device context, behavioural anomalies, vulnerability intelligence, business impact and exposure pathways into a unified risk model, and behavioural anomaly detection across an asset estate of this breadth is genuinely model-driven. But medical device security is one of five products on a horizontal platform whose centre of gravity is cyber-physical systems across manufacturing, energy and critical infrastructure, and the platform's core asset is the breadth of its device intelligence across all those domains. Compare Ordr and Cylera, both graded A, where the ML is the whole product and healthcare is the whole market.

Risk prioritisation and remediation guidance integrated into enterprise workflows rather than autonomous enforcement, with the ViPR Pro product specifically handling vulnerability prioritisation and remediation. The stated design intent is addressing critical exposures quickly while minimising operational disruption, which is the correct framing for environments where enforcement error is consequential. Graded B rather than A because no explicit human approval gate or enforcement simulation capability was described in located materials, unlike Ordr which documents simulating enforcement impact and showing blast radius before rules change.

Product architecture is clearly enumerated at the five-product level and the risk model inputs are named, covering device context, behavioural anomalies, vulnerability intelligence, business impact and exposure pathways. But no detection methodology, training data description, model detail or accuracy figures were located, and the language is consistently platform-level rather than technical. The index's category editorial requires named detection methodologies rather than marketing language, and Armis sits below that bar relative to Cylera, which explains its Digital Twin mechanism, and Bluesight, which names unsupervised learning explicitly.

The strongest analyst validation in this category, though not healthcare-specific. Named a Leader in the 2026 Gartner Magic Quadrant for CPS Protection Platforms for the second consecutive year among 13 evaluated vendors, and recognised in the companion Critical Capabilities report which scores product functionality across four use cases. Gartner Peer Insights carries 119 reviews in the CPS category at 4.7 out of 5 as of March 2026, with 267 ratings across all markets, which is substantial independent customer feedback. Graded B rather than A for two reasons: the recognition is for CPS protection broadly rather than medical device security specifically, so it does not establish healthcare depth, and peer reviews include a substantive criticism that OT and CPS protocol understanding is basic rather than top tier with limited ability to alert on true OT-specific threats. No healthcare outcome data or KLAS healthcare ranking was located, unlike Asimily and Ordr.

No published detail located on data handling, retention or PHI treatment in clinical deployments. The on-premise deployment option materially reduces exposure for organisations that select it, since data need not leave the environment, but no specific policy statement was retrieved.

No published BAA terms or HIPAA posture statement located at the time of review.

No specific third party attestation was retrieved at the time of review, consistent with every other vendor in this category. Note that a Gartner Magic Quadrant Leader placement is analyst recognition of market position and capability, not a security attestation, and the two should not be conflated.

Not an FDA regulated product; the platform secures medical devices rather than performing a medical function. Same position as every device security vendor in this category.

No governance framework or model evaluation disclosure located. The relevant risk class is device classification coverage rather than demographic bias: on a platform spanning IT, OT, IoT, IoMT, cloud and code, uneven model performance across asset classes would leave specific device populations under-protected, and the peer review criticism regarding OT protocol depth suggests coverage is genuinely uneven across domains. No published analysis of classification accuracy by asset class was located.

Integration into enterprise security workflows is the platform's stated design principle, replacing fragmented point solutions with a single contextualised view spanning IT, OT, IoT, IoMT, cloud and code, and peer reviewers specifically credit smooth integration with existing security tooling and a multitude of available data sources. Breadth of asset class coverage in one platform is the differentiator against healthcare-only competitors. The pending ServiceNow acquisition is directly relevant to this axis, since deep integration with the dominant enterprise ITSM and workflow platform would be a substantial interoperability advantage if realised, and buyers should factor that into a multi-year view.

The most flexible deployment position in this category. Armis offers on-premise, cloud AND hybrid options, explicitly so organisations can align the platform with their own infrastructure strategy while retaining a consistent security model. That materially exceeds the cloud-only posture of Asimily, Ordr and Cylera, and gives healthcare organisations with data sovereignty or residency constraints a genuine choice, which otherwise only Circle CVI provides in a different category. No specific residency terms located, but the architectural options themselves resolve most of the concern.

No pricing published and no pricing basis disclosed. The five-product platform structure means a healthcare buyer needs to establish whether Medical Device Security can be licensed independently or requires broader platform adoption, and that is not public. Independent analysis in this category has noted that enterprise configuration costs for major platforms can be very high, so the variance is material and undisclosed.

The broadest coverage of any vendor in this category, spanning IT, OT, IoT, IoMT, cloud and code assets across healthcare, manufacturing, energy, critical infrastructure and government, delivered through five products covering asset management, OT and IoT security, medical device security, vulnerability prioritisation and early warning. For a health system that also operates industrial plant, building management systems and conventional IT, a single platform covering all of it is a genuine consolidation argument. The trade-off is the one this record flags throughout: breadth is bought at some cost in healthcare-specific depth relative to Cylera or Asimily.