PRESIDIO SOLUTIONS UK LIMITED

SaaS - Armis Centrix

Armis Centrix is a cybersecurity solution that provides organizations with comprehensive visibility and control over all assets across IT, OT, IoT, and IoMT environments. It enables the detection and mitigation of risks/vulnerabilities by analysing and managing the security posture of network connected devices, ensuring a strengthened defence against cyber threats.

Features

• Asset inventory management for IT, OT, IoT, and IoMT.
• AI-driven Asset Intelligence Engine for risk and threat detection.
• Real-time passive network monitoring and traffic analysis.
• Vulnerability monitoring, prioritization, and remediation management.
• Automated enforcement and policy-based security actions.
• Comprehensive compliance reporting and gap analysis capabilities.
• Agentless SaaS platform with optional on-premise collectors.
• Deep visibility into device behaviour and connections.
• Integration with existing security and IT infrastructure.
• Customizable dashboards, alerts, and real-time metrics.

Benefits

• Enhanced security posture across entire asset attack surface.
• Complete visibility of managed, unmanaged, and IoT devices.
• Drastically reduced Mean Time To Detect and Remediate (MTTD/MTTR).
• Automated compliance reporting for major standards (CIS, NIST).
• Proactive mitigation of cyber risks and vulnerabilities.
• Seamless integration with existing IT and security stacks.
• Operational efficiency through unified asset management and context.
• Quick deployment and time-to-value with agentless architecture.
• Protection for critical infrastructure and medical devices.
• Scalable cloud-native platform adapting to organizational growth.

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at procurementuk@presidio.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

412485345985157

Contact

Procurement UK
07717405567
procurementuk@presidio.com

About your service

• Service categories:

  Application Development and Deployment

  AI platforms

  • Search and knowledge discovery

  AI life cycle

  • Data Labeling Software

  AI software services

  • Anomaly Detection AI Software Services
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Maintenance windows are communicated in advance. Requires basic network connectivity for collectors.
• System requirements:
  • Modern web browser (Chrome, Edge, Firefox, Safari).
  • Virtual Collector: 8 CPU cores, 16GB RAM.
  • Virtual Collector: 40GB Storage, VMware/Hyper-V/KVM.
  • Physical Collector: 1U rack space (if used).
  • Management IP and basic network configuration.
  • Outbound HTTPS access to Armis Cloud.
  • SPAN/TAP port or packet broker feed.

User support

• Email or online ticketing support: Yes
• Support response times: The initial response time for tickets depends upon the severity of the ticket and level of support. ; Critical (Severity 1) - 1 hour (Premium/Platinum) or 4 business hours (Standard); High (Severity 2) - 8 hours (Premium/Platinum) or 1 business day (Standard); Medium (Severity 3) - 2 business days; Yes; Low (Severity 4) - 4 business days
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: No
• Support levels: Standard Support: 24x7 access to online portal, email/phone support, software updates. Premium Support: Includes designated support contacts, faster response times (1hr for Sev1), and quarterly reviews. Technical Account Manager: Available for Premium customers for proactive guidance.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Armis onboards and trains new customers through a combination of its agentless SaaS platform and extensive support resources. The platform easily integrates with existing IT and security systems, ensuring a smooth start without operational disruptions. Customers gain access to Armis University, case studies, webinars, and a rich resource centre for self-learning. Additionally, Armis provides direct support and guidance for setup, ensuring users can effectively manage and secure their devices from the outset. This approach facilitates a comprehensive understanding and efficient use of Armis solutions.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: All data collected or derived by Armis is available for export. There are a number of ways to export the data: ; 1) by running a search in the UI then using the Export function to download in CSV or XLXS format; 2) creating a report that extracts the data of interest and generate a corresponding CSV or XLSX file, and ; 3) use our API to exporting the data of interest.
• End-of-contract process: The service is terminated, and access is revoked. Data is retained for a short grace period (usually 30 days) before being securely deleted. No additional costs if offboarding within terms.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Armis has engaged 3rd party consultants and experts to provide assessments, feedback and guidance on how to best ensure the Armis platform is accessible to as many people as possible. This includes actively working through our known WCAG 2.0 findings ( 1.1.1; 1.3.1; 1.3.2; 1.4.3; 2.4.7; 4.1.2).

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems: Linux or Unix
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The mobile interface provides access to dashboards, alerts, and reports via a responsive HTML5 web portal. Full configuration is best performed on desktop.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: A modern, intuitive HTML5 web-based console providing dashboards, asset inventory lists, query builders, and reporting tools. It supports dark/light modes and is responsive.
• Accessibility standards: None or don’t know
• Description of accessibility: Armis has engaged 3rd party consultants and experts to provide assessments, feedback and guidance on how to best ensure the Armis platform is accessible to as many people as possible. This includes actively working through our known WCAG 2.0 findings ( 1.1.1; 1.3.1; 1.3.2; 1.4.3; 2.4.7; 4.1.2). Once the Armis platform has reached appropriate compliance with WCAG 2.0, Armis will start performing VPAT assessments carried out by a third party on an annual basis. Additionally, Armis is looking into tooling that we can add to our SDET & QA systems to detect deviations at build time.
• Accessibility testing: Armis has engaged 3rd party consultants and experts to provide assessments, feedback and guidance on how to best ensure the Armis platform is accessible to as many people as possible. This includes actively working through our known WCAG 2.0 findings ( 1.1.1; 1.3.1; 1.3.2; 1.4.3; 2.4.7; 4.1.2).
• API: Yes
• What users can and can't do using the API: Users can Programmatically: 1. Retrieve full asset inventory and details. 2. Manage alerts and vulnerability data. 3. Integrate with CMDBs, SIEMs, and ticketing systems. 4. Execute custom queries (ASQ) and tag devices. Limitations: API rate limits apply (standard SaaS protections).
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: What: Dashboards, Reports, Alerts, Policies, Risk Factors. How: Users create custom queries (ASQ), build widgets, and define policy rules via the UI. Who: Administrators and authorized users.

Scaling

• Independence of resources: Armis is a SaaS based service allowing us to add (or subtract) cloud resources to meet a customer’s need automatically. Customers can also deploy on-premise collectors to collect asset information from on-premise data sources. Collectors are fully independent and can scale horizontally as needed.

Analytics

• Service usage metrics: Yes
• Metrics types: Comprehensive metrics on:1. Asset counts (IT/OT/IoT).2. Vulnerability exposure and risk scores.3. Threat alerts and severity trends.4. Compliance gaps and policy violations.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Armis

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: Keys are tenant specific and managed through the AWS key management service (KMS), a FIPS 140-2 certified offering (https://csrc.nist.gov/projects/cryptographic-module-validation-program/Certificate/3139).; Each customer key is randomly generated per industry standards and used only for that client. Keys are encrypted at rest and in transit and are never reused or shared. Admins (DevOps) have access to the keys and SecOps continually monitors for potential deviations in the appropriate use of encryption keys.
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Degaussing
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: All data collected or derived by Armis is available for export. There are a number of ways to export the data: 1) by running a search in the UI then using the Export function to download in CSV or XLXS format 2) creating a report that extracts the data of interest and generate a corresponding CSV or XLSX file, and 3) use our API to exporting the data of interest.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • XLSX
  • PDF
  • API-JSON
• Data import formats:
  • CSV
  • Other
• Other data import formats: API-JSON

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Armis guarantees 99.9% availability. SLAs provide service credits for uptime below this threshold.
• Approach to resilience: Armis is a cloud based SaaS solution, designed to provide continuous operation built on standard resilient AWS infrastructure. The Armis operations teams are continuously monitoring the platform as part of the service with a 24x7 response team.
• Outage reporting: 1. A public dashboard; 2. Email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Role-Based Access Control (RBAC) limits access to management interfaces. Support access is restricted to authorized personnel via VPN/MFA.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: SOC 2; ISO 27017, ISO 27018, C5 (BSI Cloud Computing Compliance Controls Catalogue), TISAX, FedRAMP Moderate (aligned with NIST SP 800-53 and SP 800-171), and UK Cyber Essentials
• Information security policies and processes: Policies cover Access Control, Incident Response, Data Protection, and Risk Management. Reporting follows a hierarchical structure up to the CISO. Compliance is audited annually.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Monthly Release Management Cycle – All product changes to our product are tightly controlled through a structured monthly release process. This includes software updates, vulnerability remediation, bug fixes, new features, etc. Only once a change has been tested and certified by our QA function can it be added to the list of changes approved for deployment into production. Any changes failing to pass QA validation and certification efforts are sent back to development and if unable to be remediated in time, deferred to an upcoming release.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: 1. Automated scanning of code and infrastructure.2. Critical patches deployed within 24-48 hours.3. Threat intel sources: NVD, Vendor alerts, proprietary research.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: 1. 24x7 SOC monitoring of all system logs.2. Automated alerts for suspicious activity.3. Incident Response capability with defined SLAs.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: 1. Pre-defined Playbooks for common incidents.2. Users report via Support Portal/Email.3. Root Cause Analysis (RCA) reports provided for major incidents.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Proof of Value (PoV): Full access to the platform for a limited time (typically 2-4 weeks) to demonstrate visibility and security value. Includes collector setup and initial assessment.
• Link to free trial: N/A

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 2.5%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 7.5%
• Between £2,500,001 and £5,000,000: 10%
• Over £5,000,001: 10%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: A-Lign Compliance and Security inc
• ISO/IEC 27001 accreditation date: Monday 1 September 2025
• What the ISO/IEC 27001 doesn’t cover: ISO/IEC 27001 provides assurance that our organisation operates a certified Information Security Management System (ISMS); however, it does not guarantee absolute security or address every security requirement in isolation.; ; Specifically, ISO/IEC 27001 does not:; ; Guarantee that security incidents will not occur, as it focuses on risk management rather than eliminating risk.; ; Prescribe specific technical security controls, tools, or configurations, allowing organisations to select controls based on risk and business context.; ; Validate the effectiveness of real-time operational security or prevent human error or misconfiguration.; ; Fully address sector-specific or regulatory requirements such as UK GDPR, NCSC Cloud Security Principles, or public sector data classification requirements.; ; Define customer responsibilities within shared responsibility models for cloud services.; ; To address these limitations, we supplement our ISO/IEC 27001-certified ISMS with service-specific security controls, alignment to relevant public-sector guidance, technical security standards, and ongoing operational monitoring and assurance.
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: British Assessment Bureau
• ISO 9001 accreditation date: Monday 26 January 2026
• What the ISO 9001 doesn’t cover: Scope limitation: Our QMS certification applies to the provision of cloud service resale and associated support activities delivered from our UK based operations team. It does not cover the design, development, or operation of the SaaS platforms themselves (e.g., Druva, CommVault, Veeam, Mimecast), as these are owned and managed by third-party vendors.; Non-applicable requirements: ISO 9001 clause 8.3 (Design & Development) is not applicable, as we do not design or develop software or cloud platforms; we act solely as a reseller and provide configuration and support services.; Third-party exclusions: Vendor-managed infrastructure, data centres, and security operations for the SaaS products are outside our certified QMS. These remain under the control of the respective vendors’ management systems.; Geographic exclusions: Our certification covers UK-based operations only; offshore vendor facilities and global support centres are not within scope.
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 54eff155-3b4c-4a81-9914-e6886f4fac17
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 7b547487-b146-4ebf-8af3-2f843e6350b2
• Other security certifications: Yes
• Any other security certifications: NHS DSP Toolkit

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at procurementuk@presidio.com. Tell them what format you need. It will help if you say what assistive technology you use.