Skip to main content

Beta Help us improve the Digital Marketplace - send your feedback

INTEGRITY360 LIMITED

Claroty Secure Remote Access

Frictionless, Reliable, and Highly Secure Remote Access for Industrial Networks.

Features

  • Remote access for OT devices.
  • Minimize cost and complexity of administering OT assets.
  • Full audit of remote OT-access with full-screen session recording.
  • Real time user access request management.
  • Enable Directory integration for Microsoft Active Directory user management.
  • Integration with 2 factory authentication services.
  • Gain full visibility of OT remote access activites.
  • Crowdstrike virus scanning integration for file uploads
  • ICAP Server virus scanning integration for file uploads

Benefits

  • Centrally manage remote access.
  • Quickly approve remote access requests.
  • Easily publish new remote access sessions.
  • Easily manage real time remote access sessions.

Pricing

£3,600 an instance

  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidreviewboard@integrity360.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

8 5 2 8 9 4 4 4 3 3 6 4 6 3 5

Contact

INTEGRITY360 LIMITED Paul Momirovski
Telephone: +44 20 3397 3414
Email: bidreviewboard@integrity360.com

Service scope

Software add-on or extension
No
Cloud deployment model
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
Service constraints
Service currently support RDP, VNC, ssh, telnet and http/https.
System requirements
  • Virtual Machine provisioning that supports linux.
  • Flexible Virtual Machine resource provisioning.

User support

Email or online ticketing support
Email or online ticketing
Support response times
Claroty’s response times will be prioritised based on the Severity Levels
https://claroty.com/support-policy
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
None or don’t know
Phone support
Yes
Phone support availability
9 to 5 (UK time), 7 days a week
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
Severity Levels dictate the need for a TAM or CSE
Severity 1 - Critical: Product is entirely inaccessible < 4 hours
Severity 2 - High: Operational but missing features are impacting operation < 8 hours
Severity 3 - Medium: Operational but degraded < 1 business day
Severity 4 - Low: Questions and/or defects noted but minimal disruption < 2 business day
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Onboarding documents are available via web. Paid for onboarding services also available.
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
Delete instance of SRA.
End-of-contract process
Delete instance of SRA.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
Application to install
No
Designed for use on mobile devices
No
Service interface
Yes
User support accessibility
None or don’t know
Description of service interface
We use an open API standard
Accessibility standards
None or don’t know
Description of accessibility
N/A
Accessibility testing
N/A
API
Yes
What users can and can't do using the API
We use an open API standard
API documentation
Yes
API documentation formats
  • Open API (also known as Swagger)
  • HTML
  • ODF
  • PDF
API sandbox or test environment
Yes
Customisation available
No

Scaling

Independence of resources
Customers control their own SRA instance.

Analytics

Service usage metrics
Yes
Metrics types
Service usage.
Reporting types
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

Supplier type
Reseller providing extra features and support
Organisation whose services are being resold
Claroty

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
User control over data storage and processing locations
Yes
Datacentre security standards
Supplier-defined controls
Penetration testing frequency
At least every 6 months
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
  • Encryption of all physical media
  • Other
Other data at rest protection approach
Password vault data for user access and asset data is stored and encrypted in the Claroty DB using AES-256 and hashed as SHA 256-bit
Data sanitisation process
Yes
Data sanitisation type
Deleted data can’t be directly accessed
Equipment disposal approach
In-house destruction process

Data importing and exporting

Data export approach
CSV
Data export formats
CSV
Data import formats
Other
Other data import formats
None

Data-in-transit protection

Data protection between buyer and supplier networks
  • TLS (version 1.2 or above)
  • Other
Other protection between networks
SSH
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
SaaS Service Level: Claroty’s Medigate and xDome service will be available 99.5% of the time, except during
Weekly scheduled upgrades (between Sunday 08:00 AM GMT - Sunday 9:00 PM GMT);
Emergency maintenance to address a critical vulnerability or to address a customer impacting defect. These are typically < 5 minutes in duration;
Collection server outages due to hardware issues and/or customer environment or network communication issues;
Any Amazon Web Service (AWS) downtime or scheduled maintenance;
Any network communication issues between the customer’s users or systems and Claroty’s systems;
Other outages outside of the control of Claroty such as a force majeure event;
Customer suspension due to customer’s breach of their agreement.
Approach to resilience
Available on request
Outage reporting
Portal alerts

Identity and authentication

User authentication needed
Yes
User authentication
2-factor authentication
Access restrictions in management interfaces and support channels
RBAC is used
Access restriction testing frequency
At least once a year
Management access authentication
2-factor authentication

Audit information for users

Access to user activity audit information
Users contact the support team to get audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
ICQ - Institute of Quality and Control
ISO/IEC 27001 accreditation date
25/02/2016
What the ISO/IEC 27001 doesn’t cover
N/A
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
No
Cyber essentials plus
No
Other security certifications
Yes
Any other security certifications
  • SOC 2
  • ISO/IEC 27017
  • ISO/IEC 27018

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
  • ISO/IEC 27001
  • Other
Other security governance standards
ISO27001:2013 (we are also SOC2 Type2 compliant/certified)
Information security policies and processes
"Claroty has a dedicated manager for Governance Risk and Compliance. We have a
security program including policies, procedures, risk dashboard, regular updates to the
senior leadership and board of directors. "

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
"
Our configuration and change mangement policy contains the foillowing elements:
Scope/Impact
Roles and responsibilities
Change control process
Configuration management
Version Control
Testing And Validation
Backout Procedures
Documentation"
Vulnerability management type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach
"We have continuous scanning in place which directly automates with tickets for our IT and devops teams to patch vulnerabilities based on SLA.
Our SLA's are: Critical within 7 business days, Highs 30 days, Medium 90 days, Low/Informational - depending on risk
We also perform annual third party penetration tests on our developed applications by an accredited third party.
"
Protective monitoring type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach
"Claroty has a defense in depth approach to security threat management. Security and system logs are sent to a Secrity Information Event Management (SIEM) system to correately, analyze, and alert on potential security events/incidents. Alerts from the SIEM are handled by a dedicated 24x7x365 security operations center (SOC).
"
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
"We have a formal process which will focuses on the below phases/steps of incident
management and response:
- Identification
- Logging/Categorization
- Initial triage/response
- Investigation
- Resolution
- Communication
- Documentation
- Post incident response review
"

Secure development

Approach to secure software development best practice
Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks
No

Social Value

Social Value

Social Value

Equal opportunity

Equal opportunity

We put each other ahead of work, knowing that if we care for each other, the results will follow.
We hold ourselves and each other to the highest standards of professionalism, ethics, and integrity.

Pricing

Price
£3,600 an instance
Discount for educational organisations
No
Free trial available
Yes
Description of free trial
Fully functioning POV
Time limited as agreed with the prospect

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidreviewboard@integrity360.com. Tell them what format you need. It will help if you say what assistive technology you use.