INTEGRATION

Cynet

Enriching OT and IT asset visibility in Nozomi Vantage with endpoint and network detection telemetry from Cynet 360.

About
Cynet

Cynet 360 is a autonomous XDR platform combining endpoint detection and response, network analytics, user behavior analytics, deception and vulnerability management in a single platform. By integrating Cynet 360 with Nozomi Vantage, security teams gain a consolidated view of managed assets across IT and OT environments — importing endpoint and network detection telemetry directly into Vantage. This enriches the asset registry with authoritative data from the Cynet management plane, accelerating incident investigation, reducing blind spots in critical infrastructure environments and enabling analysts to correlate edr xdr telemetry with OT network observations without switching consoles.

Features

Importer Data Types

Vantage imports the following from
Cynet 360
:
  • Asset Details Enrichment and Create New in Vantage

    Cynet 360 supplies records including hostname, IPs, MAC, OS version, agent version, host group and last-seen timestamp — to enrich existing Vantage assets and create new asset records for endpoints not yet observed on the OT network.

Joint Use Cases

  • Correlating Cynet signals with OT network alerts

    When Nozomi Vantage raises an anomaly alert for a device inside an OT segment, the analyst can pivot to the same asset's Cynet 360 record in Vantage to review recent detections, prevention events, isolation status and agent health, all without leaving the Vantage investigation workflow. This cross-layer correlation surfaces whether a network-layer anomaly coincides with activity observed by Cynet, reducing the time needed to confirm or dismiss an incident.

  • Closing asset inventory gaps across IT and OT

    Devices recorded by Cynet 360 but not yet observed by Nozomi network sensors are automatically created as new asset records in Vantage, populated with hostname, OS, agent status and last-seen timestamp drawn from the Cynet management plane. OT operations teams can audit the resulting unified inventory to identify unmonitored or underprotected assets in industrial and critical infrastructure zones, then prioritize sensor deployment accordingly.

  • Validating asset-management coverage across IT and OT

    Records from Cynet 360 are reconciled with Vantage's network-observed inventory, surfacing assets that are present in one source but missing from the other.

Integration Prerequesites

  • Active Nozomi Vantage tenant with the connector-configuration role assigned to the administering account
  • Cynet 360 tenant with an API user granted Host Inventory read permission
  • Consistent hostname, IP or MAC addressing between Cynet 360-recorded assets and Vantage-observed assets to enable accurate asset correlation and deduplication
  • Outbound network connectivity from Vantage to the source-tool API endpoint over HTTPS (this prerequisite is a deployment placeholder and may be adjusted to match your environment)
  • Outbound network connectivity from Vantage to the source-tool API endpoint over HTTPS (this prerequisite is a deployment placeholder and may be adjusted to match your environment)

Take the next step.

Discover how easy it is to identify and respond to cyber threats by automating your OT and IoT asset discovery, inventory, and management.