The boundary of this market
Software, appliances, managed services, intelligence, and evidence systems used to discover, understand, monitor, control access to, segment, protect, investigate, recover, and govern operational technology and industrial control systems without disregarding safety, reliability, engineering authority, or operational continuity.
The maintained market is organized around operating role, documented capability, authority context, and the buyer decision each record can support. It is not a popularity list, paid marketplace, or claim that a single product category can own every part of the workflow.
What is outside the boundary
- generic IT security products without a documented OT, ICS, IoT, or cyber-physical operating role
- generic network monitoring without industrial protocol or operational context
- penetration-testing tools whose primary public use is offensive exploitation
- consultancies without a maintained OT defense product, managed service, evidence platform, or recurring intelligence product
- industrial automation products listed only because they can be networked
- consumer IoT security products
- pages that provide live-system exploit, scanning, bypass, destructive-response, or sensitive architecture instructions
How the market divides
OT Visibility And Threat-Detection Platform
9 maintained organizations begin with this operating model. Their dossiers preserve adjacent capability, fit conditions, and evidence limits so the primary classification does not erase meaningful differences.
Cyber-Physical Asset Intelligence And Exposure Platform
6 maintained organizations begin with this operating model. Their dossiers preserve adjacent capability, fit conditions, and evidence limits so the primary classification does not erase meaningful differences.
Industrial Endpoint Protection Platform
2 maintained organizations begin with this operating model. Their dossiers preserve adjacent capability, fit conditions, and evidence limits so the primary classification does not erase meaningful differences.
OT Secure Remote Access Platform
7 maintained organizations begin with this operating model. Their dossiers preserve adjacent capability, fit conditions, and evidence limits so the primary classification does not erase meaningful differences.
Industrial Network Security And Segmentation Platform
4 maintained organizations begin with this operating model. Their dossiers preserve adjacent capability, fit conditions, and evidence limits so the primary classification does not erase meaningful differences.
Unidirectional Gateway And Controlled-Transfer Platform
1 maintained organizations begin with this operating model. Their dossiers preserve adjacent capability, fit conditions, and evidence limits so the primary classification does not erase meaningful differences.
OT Asset Inventory And Configuration-Risk Platform
5 maintained organizations begin with this operating model. Their dossiers preserve adjacent capability, fit conditions, and evidence limits so the primary classification does not erase meaningful differences.
Industrial Cyber-Risk And Governance Platform
3 maintained organizations begin with this operating model. Their dossiers preserve adjacent capability, fit conditions, and evidence limits so the primary classification does not erase meaningful differences.
Industrial OEM Security Portfolio
7 maintained organizations begin with this operating model. Their dossiers preserve adjacent capability, fit conditions, and evidence limits so the primary classification does not erase meaningful differences.
OT Managed Defense And Threat-Intelligence Platform
1 maintained organizations begin with this operating model. Their dossiers preserve adjacent capability, fit conditions, and evidence limits so the primary classification does not erase meaningful differences.
Why the architecture matters
Buyers often compare organizations that participate in the same broad outcome but own different stages, data, authority, or accountability. A platform, data provider, network, service organization, content provider, and integration layer may all appear in one workflow without being substitutes. The market map makes those relationships visible.
The durable evaluation question is not which organization has the longest feature list. It is which operating model fits the buyer's governed work, which dependencies it introduces, what evidence it preserves, how change propagates, and whether the organization can exit or replace the system without losing the decision record.
How to use this publication
- Use categories and the market map to define the operating role.
- Use capability pages to define workflows and evidence requirements.
- Use authority and risk-domain records to establish scope and questions requiring qualified judgment.
- Use organization dossiers and comparisons to build a research list.
- Use guides and tools to create a repeatable evaluation record.