ColorTokens is proud to join the newly announced Claroty Technology Alliances Program. The program integrates market-leading microsegmentation capabilities with the Claroty Platform to strengthen operational resilience across critical infrastructure, where continuous production and human safety are vital.
As Grant Geyer, Chief Strategy Officer at Claroty, said, segmentation will become one of the critical controls for asset-intensive organizations. I agree. This is especially important in a post-Mythos world.
AI-driven attacks will only increase the speed and scale of compromise. As critical infrastructure environments become more connected, each new connection can create a new path for risk. Organizations need controls that limit how far an attacker can move after initial access.
That matters because OT is critical to the business. If OT stops, business stops. Manufacturing production lines can halt. Water treatment operations can be disrupted. A compromised pipeline valve cannot always be restarted or recovered the way an IT server can.
From Asset Visibility to Enforced Resilience
Claroty xDome gives organizations deep visibility into cyber-physical systems (CPS). It helps teams build a detailed asset inventory, understand exposures, detect anomalous communications, and see risk across complex environments.
The ColorTokens Xshield platform complements that visibility by helping organizations understand how assets communicate, define what should be allowed, and restrict what should not.
Access the Integration Brief: See how Claroty xDome and ColorTokens Xshield combine CPS visibility with Zero Trust microsegmentation
This is also where Xshield plays well with others. Operational resilience depends on security tools working together, not operating in silos.
For critical infrastructure, that connected context matters. OT and IoT asset discovery integrations with Claroty, Ordr, and Nozomi Networks give Xshield deeper asset attributes for stronger OT microsegmentation.
Xshield integrates with SIEM/SOAR platforms such as Cortex, ArcSight, Splunk, Radar, and Microsoft Sentinel to gather data, enrich context, and guide the right microsegmentation strategy. It brings in vulnerability context from Tenable and Rapid7 to help teams monitor posture and build stronger policies.
It also works with EDR platforms including CrowdStrike, SentinelOne, and Microsoft Defender for Endpoints to improve visibility and accelerate segmentation without adding new agents.
The outcome is faster containment, fewer blind spots, and segmentation that fits the way operational teams already work.
Why Risk-Intelligent Enforcement Matters
True Zero Trust in OT and IoT environments requires risk-intelligent enforcement.
Through our deep integration with Claroty xDome, the ColorTokens platform ingests rich asset context and pairs it with traffic visibility and real-time threat signals from CISA and MITRE. The result is the industry’s first risk-weighted microsegmentation strategy.
This helps organizations proactively close the highest-risk communication paths before attackers can use them to move laterally and reach critical systems.
We understand that not every exposure carries the same business risk. A vulnerable asset connected to a mission-critical process needs a different level of urgency than a lower-impact system. A communication path that enables lateral movement needs to be addressed before it becomes an attack path.
With Xshield, teams can define segmentation policies and simulate their impact before enforcement. They can reduce unnecessary communication, restrict lateral movement, and protect critical assets without disrupting users, applications, or operations.
For agentless protection, Xshield Gatekeeper helps extend enforcement to legacy and unpatchable systems that are common in CPS environments. And because CPS does not exist in isolation, we have the broader platform that protects data center servers, cloud workloads, containers, and user endpoints for complete enterprise coverage.
Recognized for OT and Enterprise Microsegmentation
At ColorTokens, we have focused on making microsegmentation practical across the environments where organizations need it most. That work has been recognized by independent analysts.
ColorTokens was named a Leader in The Forrester Wave™: Microsegmentation Solutions, Q3 2024, and was the only microsegmentation vendor on the list to receive a “Superior” rating in OT and IoT security. ColorTokens was also named a Leader and Outperformer in the 2026 GigaOm Radar for Microsegmentation, and was the only vendor to achieve a perfect 5.0 across every key feature category.
These recognitions reinforce why the Claroty integration, along with our broader ecosystem of integrations, matters. Microsegmentation must be broad, intelligent, and operationally practical.
Why We Do What We Do
Operational resilience is strongest when visibility, context, and enforcement work together.
Together, Claroty and ColorTokens help organizations understand their operational environments, prioritize the risks that matter most, and enforce segmentation in a way that supports continuity.
At ColorTokens, this is how we think about breach readiness. Some attacks will inevitably get through. Our job is to make sure they cannot move freely, disrupt critical systems, or turn into a larger business crisis.
Claroty’s focus on operational resilience and our mission to help organizations become breach ready come together around the same goal of protecting what keeps the business running.
This is why we do what we do.
See how we help critical infrastructure teams contain lateral movement risk, protect critical systems, and stay breach ready. Request a Demo or Contact Us to speak with a ColorTokens expert.
