otbase.com

What It Is

OTbase is an asset inventory and cybersecurity governance platform for industrial OT/ICS environments. Rather than focusing on traditional threat detection, it centers on “sustainable OT security” and resilience building, automatically discovering devices, networks, software, firmware, vulnerabilities, lifecycle status, and health conditions. The article highlights that it can reach down to Level 0, requires no hardware sensors, and offers an on-premises AI component, OTbase Insight, for natural-language investigations, reporting, and dashboard generation.

Core Capabilities and Deployment

Its protection scope covers OT asset inventory, vulnerability management, audit and compliance, maintenance health monitoring, change management, and issue management. Discovery is local software and supports Windows, Linux, Docker/Podman, Raspberry Pi, Windows Agent, and mobile zero-install deployment. It can perform network discovery, host discovery, and on-site snapshot collection. Inventory can be self-hosted or used via OTbase Cloud; the cloud version is intended for 100 to 5,000 devices, while discovery still runs locally, credentials remain on-premises, and data is pushed one-way to the cloud.

Compliance, Management, and Integrations

On compliance, the article mentions materials related to NIS2 and IEC 62443, as well as automated checks for issues such as outdated OS versions and disabled antivirus, but it does not disclose product certifications. Management capabilities are relatively comprehensive: it supports a centralized asset repository, access control, email notifications, new CVE alerts, firmware defect reminders, periodic reports, and output to Power BI Fabric and Splunk. For integration, it provides a REST API, Python SDK, Chrome extension, and Discovery Manager, making it suitable for incorporation into existing enterprise reporting and security operations workflows.

Pricing, Pros, and Cons

Pricing is not public and requires contacting sales; the article only states that the number of Discovery installations does not affect pricing. Its strengths include no need for hardware probes, deep asset granularity, rich context, reduced risk of sensitive data leaving the environment through local AI, and usefulness for security, engineering, audit, maintenance, and management teams. Limitations include the lack of disclosed pricing, SLA, support tiers, and third-party certifications; active discovery and credential configuration still require planning in complex, segmented OT networks.

Best Fit and Access from China

It is suitable for multi-site OT asset owners in sectors such as manufacturing and oil and gas, as well as machine builders that need to track configurations at customer sites. The article does not provide information on access from China, so this remains unknown; payment methods are also not disclosed and typically require enterprise procurement discussions. If deployment in China is constrained by network, compliance, or service support limitations, alternatives to compare include Claroty, Nozomi, Tenable OT, Dragos, Forescout, as well as asset mapping and vulnerability management solutions from domestic industrial control security vendors.