Illumio & Armis link tools to secure IT & OT estates

Illumio has expanded its partnership with Armis to deliver an integrated security offering for organisations running converged information technology (IT) and operational technology (OT) environments.

The combined package links the Illumio Platform with Armis Centrix, Armis' cyber exposure management platform, and is available globally to joint customers.

Industrial groups and critical infrastructure operators are increasing investment in security controls that span corporate networks and plant-level systems. Many environments include older devices and specialist equipment that are difficult to patch or replace. Asset discovery and network segmentation have become central tools for limiting the spread of intrusions once attackers gain access.

Illumio's platform includes Illumio Insights and Illumio Segmentation, while Armis Centrix focuses on cyber exposure management across connected assets. The companies are positioning the integration as a Zero Trust approach for IT, OT and internet of things (IoT) estates.

Armis provides device discovery and classification across IT, OT and IoT, including unmanaged and legacy systems. That data can flow into Illumio for visibility and mapping across environments. The integration also connects Armis' risk intelligence with Illumio Insights to surface segmentation actions with greater impact on risk reduction.

Containment workflow

A key element is an automated containment path between anomaly detection and segmentation enforcement. Under the integration, Illumio can apply microsegmentation rules when Armis detects anomalies, with the goal of restricting lateral movement across networks.

The vendors are also linking telemetry to common security operations workflows, including feeds into SIEM and SOAR tools used by security operations centres for investigation and response.

Nadir Izrael, CTO and co-founder at Armis, described the partnership as a way to combine visibility with enforcement.

"Securing the entire attack surface starts with knowing what's connected and where risk lives," said Izrael.

"This partnership unifies visibility, asset intelligence, and enforcement. Together, we empower organisations to act decisively, stopping threats before there's any impact and keeping critical operations resilient," he added.

Standards focus

The approach is positioned as supporting compliance requirements that often apply to critical infrastructure and industrial operators, including NERC CIP, IEC 62443 and NIST 800-82.

Industrial security programmes often need to account for safety and uptime constraints that limit the use of traditional endpoint tools. In these settings, network-based segmentation and continuous asset intelligence are often used as compensating controls, particularly where organisations have limited visibility into what is connected to production networks.

Todd Palmer, senior vice president of global partner sales and alliances at Illumio, said the stakes in these environments extend beyond business disruption.

"When these types of environments are compromised, it's not just downtime-it's safety, infrastructure, and trust at stake," said Palmer.

"By pairing Illumio breach containment with Armis' continuous asset intelligence, we empower teams with insight and control to act fast and keep essential systems online," he said.

Wider partnership

The expanded partnership also includes joint go-to-market activity. Illumio and Armis are aligning sales and marketing efforts around the integrated offer, alongside coordination on deployment and customer access.

For Illumio, the announcement also puts additional emphasis on Illumio Insights alongside its established segmentation technology. The inclusion of Insights extends the relationship beyond segmentation and positions it as a more native integration for operational use.

The integrated offer targets organisations running hybrid estates that span corporate IT, cloud services and operational networks. Both vendors are promoting breach containment and continuous exposure management as complements to preventative controls, particularly as attackers increasingly exploit identity, remote access pathways and unmanaged devices.

The Illumio-Armis integration is now available to joint customers worldwide.