Illumio, Armis deepen OT security & visibility push

Illumio has expanded its strategic partnership with Armis, adding tighter product integration and a joint route to market for security teams working across converged IT and operational technology (OT) environments.

The update brings Illumio Insights into the existing Armis integration, which previously focused on segmentation. The combined offering links the Illumio Platform-including Illumio Insights and Illumio Segmentation-with the Armis Centrix cyber exposure management platform.

Organisations in sectors such as energy, manufacturing and transport are moving toward more connected environments, where traditional IT networks sit alongside industrial control systems. That shift has increased the number of connected assets and expanded the range of devices security teams must track, including legacy equipment and unmanaged endpoints.

Illumio and Armis are positioning the partnership around improved asset visibility and controls designed to limit how an attacker can move through a network after an initial compromise.

How it works

The integration starts with asset discovery and classification. Armis identifies IT, OT and internet of things devices, including unmanaged and legacy assets, and shares that classification data with the Illumio Platform.

Asset context from Armis is used to improve visibility and mapping in Illumio. Armis intelligence also feeds into Illumio Insights to highlight risk-based segmentation opportunities.

The integration also links detection to enforcement. When Armis detects anomalies, Illumio can enforce microsegmentation policies to limit lateral movement after suspicious activity is flagged.

Security operations is another focus area. Joint telemetry can feed standard security operations centre workflows, as well as SIEM and SOAR tools, to speed investigations by giving teams shared context across detection and segmentation controls.

Nadir Izrael, CTO and co-founder of Armis, said visibility of connected assets is central to the joint approach.

"Securing the entire attack surface starts with knowing what's connected and where risk lives," said Nadir Izrael, CTO and Co-Founder, Armis. "This partnership unifies visibility, asset intelligence, and enforcement. Together, we empower organizations to act decisively, stopping threats before there's any impact and keeping critical operations resilient."

Standards and compliance

The integration is being tied to security programmes that reference recognised standards used in critical infrastructure and industrial settings, including NERC CIP for parts of the power sector, IEC 62443 for industrial automation and control systems, and NIST 800-82 guidance for industrial control system security.

Vendors in this market have increasingly aligned messaging with these frameworks as operators face regulatory pressure and insurance scrutiny following disruptive cyber incidents. Security leaders have also sought clearer mapping between asset inventories, vulnerability exposure and enforceable controls in environments where patching may be slow or difficult.

Go-to-market plans

Alongside the technical work, Illumio said the expanded partnership includes aligned go-to-market strategies. The companies plan joint sales and marketing activity aimed at making the combined deployment more accessible for organisations protecting critical infrastructure.

Todd Palmer, SVP of Global Partner Sales and Alliances at Illumio, framed the risks in operational as well as cyber terms.

"When these types of environments are compromised, it's not just downtime-it's safety, infrastructure, and trust at stake," Palmer said. "By pairing Illumio breach containment with Armis' continuous asset intelligence, we empower teams with insight and control to act fast and keep essential systems online."

The Illumio Platform includes Illumio Insights and Illumio Segmentation. Insights is focused on detection and response in cloud environments, and Segmentation is focused on breach containment and control of east-west movement across networks. Armis Centrix is positioned as a cyber exposure management platform that builds and maintains an asset inventory and applies risk context to connected devices.

The Illumio-Armis integration is available worldwide for joint customers.