Claroty CoreX Technology - Claroty’s advanced CoreX engine powers the Claroty Platform and is the foundation on which Claroty’s integrated suite of products is built on. It was specifically designed to ensure safe, secure and reliable operations in large, complex industrial networks. The base of our CoreX engine is comprised of proprietary dissectors for all major IT and industrial network protocols–both open and proprietary. The dissectors leverage deep packet inspection to safely extract information from both serial and IP-based networks. These dissectors extract precise details about each asset on the network, capturing exactly how assets are communicating across the network and leverage this information to build a high-fidelity baseline model. CoreX technology correlates this data and visually depicts the complexity of communications pathways down to the lowest levels of the network–down to the serial and fieldbus networks that control physical processes.

Leveraging these fine-grain network details, CoreX employs advanced, behavior-based anomaly detection and sophisticated pattern matching for early identification of malicious activity. It discovers anomalous activity across the entire “cyber kill chain” and enables teams to proactively hunt for advanced threats. The CoreX engine can be deployed on a single server and in server-plus-sensor configurations. This flexible and scalable deployment architecture enables the Claroty Platform to work in extremely large sites with many thousands of nodes. It also enables Claroty to deploy sensors in environments that require smaller CPU and data footprints and scenarios requiring communications over low bandwidth networks - for example, electric transmission grids, or oil and gas pipelines where space, CPU and bandwidth are all precious commodities.