Overview

Claroty xDome is a cloud-native SaaS platform for discovering and protecting cyber-physical systems (CPS). It is best suited to organizations securing industrial or other operational environments that need asset context alongside exposure and network controls. Its breadth is compelling, but custom pricing and a sales-led buying process make fit and cost important early questions.

Key features

xDome combines passive monitoring with discovery methods that can identify assets before a passive collection server is deployed. Automatic inventory updates and the CPS Library help teams maintain precise device records; coverage across more than 450 protocols broadens its reach in varied environments. That breadth is useful for complex estates, though the protocol count alone does not establish compatibility with every deployment.

Risk prioritization organizes exposures by production line, system, and business purpose, with AI-powered remediation recommendations. This context can help security teams focus on operational impact rather than treating every finding alike. For network protection, xDome maps device communications, recommends micro-segmentation policies, and clusters devices into zones aligned with IEC 62443. It also identifies known and emerging CPS-specific threat indicators and relates alerts to the customer’s business.

Integrations span SIEM, SOAR, CMDB, CMMS, vulnerability management, ticketing, NAC, and endpoint tools. Named compatible systems include Cisco ISE, CrowdStrike EDR, IBM Maximo, and xDome API; an MCP Server extends integration into AI ecosystems. Claroty describes these directory entries as technical compatibility, so teams should confirm that a particular connection meets their workflow needs. Trust Center certifications and frameworks include SOC 2 Type 2, ISO 27001:2022, ISO 27701:2019, C5, CSA STAR, HIPAA, GDPR, and SOCI.

Pricing

Claroty xDome

xDome is a paid, modular SaaS platform with custom pricing by sales inquiry. Claroty invites prospective customers to request a demo; no trial terms are stated. The sales-led route may suit organizations that need to scope a CPS deployment, but buyers seeking a published price or self-serve trial cannot compare costs upfront.

No seat or usage caps are stated. Teams should establish the commercial terms and scope during the sales process rather than assume a particular licensing basis.

Platforms

xDome runs as a cloud-native SaaS platform and is available via web and API. Passive monitoring and OT asset discovery are supported; Modbus is among its supported protocols. Its API and broad integration categories help it fit into existing security and operational workflows, while teams should validate the specific systems they rely on.

Who it's for

xDome is aimed at industrial environments and organizations securing CPS across industrial, healthcare, public-sector, and commercial settings. It is a strong fit for teams that need asset discovery, operationally contextualized risk prioritization, and network segmentation in one platform. It is less suited to buyers who require transparent pricing or a trial before engaging sales.

Pros and cons

Pros: Discovery can find assets before passive collection is deployed, easing initial visibility work.
Pros: Risk context tied to production lines and business purpose helps teams prioritize exposures with operational relevance.
Pros: More than 450 protocols, broad integration categories, and named compatible systems support consideration in diverse stacks.
Cons: Custom pricing and demo-led evaluation make budget comparison and self-serve assessment difficult.
Cons: Technical compatibility does not by itself confirm that a listed integration fits a team's exact workflow.

Alternatives

Nozomi Networks Platform is worth comparing when a free plan and Linux or self-hosted options matter; its Vantage SaaS free plan is also described as cloud-hosted security infrastructure used to license hardware and Guardian nodes.

Honeywell Forge is an alternative for buyers seeking product-specific offerings across a broad range of platforms, with term-based licensing and feature choices for Advanced Process Control.

OTDefend may suit teams considering a tailored custom solution with Linux, self-hosted, web, and Windows platform support.

EmberOT offers a free, self-hosted OT PCAP Analyzer for device and protocol breakdown, with a valid school or business email required to download.

Claroty CTD is the on-premises alternative for federal OT cybersecurity controls and mobile flyaway kits.

Radiflow iSID is another paid option with self-hosted and web platforms and demo-led purchasing.

Dragos Platform is a paid alternative available on self-hosted and web platforms, with platform demos by request.

Kaspersky Industrial CyberSecurity Platform is an enterprise OT/IoT option for Linux, web, and Windows environments, with purchasing through a demo or sales contact.

Compare more options in OT and ICS Security Monitoring Software.

Verdict

Choose Claroty xDome if your team needs broad CPS asset visibility tied to operational risk, threat detection, and network protection in a cloud-native platform. Its discovery depth and business-context prioritization are the main reasons to shortlist it. Look elsewhere if you need upfront pricing, a stated trial, or a platform choice you can assess without a sales conversation.

	Claroty xDome	Rhebo Industrial Protector
Platforms	api, Web	self-hosted
Deployment	cloud	on_premises
Passive monitoring	Yes	Yes
OT asset discovery	Yes	Yes
Supported protocols	Modbus	OPC, IEC 60870-5-104, IEC 61850-8-1, DNP3
SIEM integration	Yes	Yes

Claroty xDome vs Rhebo Industrial Protector

Claroty xDome

Rhebo Industrial Protector