Claroty unveils AI-powered CPS Library to boost asset visibility

Claroty has introduced its CPS Library, a centralised asset catalogue designed to provide enhanced visibility and vulnerability attribution for cyber-physical systems (CPS). Developed with input from key automation vendors and medical device manufacturers, the catalogue seeks to address long-standing challenges faced by security teams in uniquely identifying assets across operational technology (OT), Internet of Things (IoT), and healthcare networks.

Asset identification challenge

Security professionals have historically struggled to gain an accurate understanding of assets within industrial and enterprise networks. Research conducted by Claroty found that 88% of CPS assets do not transmit an exact product code, while 76% use product names that diverge from official vendor records. This lack of alignment means that many organisations lack a comprehensive view of their assets, leading to incomplete vulnerability correlation and potential security blind spots.

The absence of a standardised, central source for asset identification has contributed to prolonged exposure to risks and complications in effective remediation. In response to these gaps, the CPS Library has been created as a single repository combining asset and vendor data, aiming to provide security teams with clearer, more dependable visibility.

AI-driven capabilities

Artificial intelligence forms the cornerstone of the CPS Library. According to Claroty, the platform utilises large language models (LLMs) and statistical inference to manage and reconcile fragmented asset and vendor information from disparate sources. This integration allows for automated asset identification, vulnerability mapping, and insight generation, condensing complex data into actionable intelligence for rapid response in high-stakes environments.

The CPS Library is intended to operate across multiple sectors, including OT, IoT, and healthcare, providing security teams with consistent traceability and accelerated incident response. The platform also includes AI-powered tools such as the Claroty MCP Server, which enables automated device queries and streamlined use of CPS security data by different teams, as well as regionalised LLM Retrieval Augmented Generation for more complete asset discovery.

Industry collaboration

Claroty developed the CPS Library in collaboration with companies such as Rockwell Automation and Schneider Electric to ensure the platform meets the requirements of different verticals and supports a wide array of connected devices. The goal is to lessen the operational burden on security teams and enable faster, more reliable decisions regarding risk management in complex environments.

"Resilience starts at visibility, and organisations require precise and deterministic traceability for every connected device that could potentially become exposed as an open door to attackers," said Yaniv Vardi, CEO, Claroty.

Vendor perspectives

Rockwell Automation expressed support for the expanded partnership on the CPS Library. "We're excited to deepen our relationship with Claroty in supporting its new CPS Library," said Tony Baker, Vice President & Chief Product Security Officer, Rockwell Automation. "Cybersecurity is becoming even more complex in an increasingly interconnected world and is intertwined with smart manufacturing priorities that demand precise device identification. The granularity of device identification honed by the Claroty CPS asset library empowers organisations to better protect their industrial automation assets from evolving threats."

Schneider Electric also emphasised the importance of a standardised approach. "Claroty's CPS Library represents a major step forward for the industry," said Jay Abdallah, President of Cybersecurity Solutions, Schneider Electric. "For too long, security teams have faced fragmented approaches to identifying and managing CPS assets, leaving gaps in risk visibility. This standardised catalogue brings clarity and consistency to an incredibly diverse asset landscape, enabling organisations to make faster, more confident decisions to protect critical operations. It's not just a tool, it's a foundation for advancing resilience in connected environments."