SecurityScorecard

Importer Data Types

• Asset Details Enrichment and Create New in Vantage

  SecurityScorecard supplies records including public IP addresses, domains and hostnames discovered as part of the organization's digital footprint, with geolocation, ASN, open-port snapshot and last-observation timestamp — to enrich existing Vantage assets and create new asset records for endpoints not yet observed on the OT network.

Joint Use Cases

• Correlating SecurityScorecard signals with OT network alerts

  When Nozomi Vantage raises an anomaly alert for a device inside an OT segment, the analyst can pivot to the same asset's SecurityScorecard record in Vantage to review exposure findings, related issue types and external posture score, all without leaving the Vantage investigation workflow. This cross-layer correlation surfaces whether a network-layer anomaly coincides with activity observed by SecurityScorecard, reducing the time needed to confirm or dismiss an incident.

• Closing asset inventory gaps across IT and OT

  Devices recorded by SecurityScorecard but not yet observed by Nozomi network sensors are automatically created as new asset records in Vantage, populated with external hostname, public IP and exposure category drawn from the SecurityScorecard management plane. OT operations teams can audit the resulting unified inventory to identify unmonitored or underprotected assets in industrial and critical infrastructure zones, then prioritize sensor deployment accordingly.

• Tying external risk-rating findings to OT-relevant assets

  External findings from SecurityScorecard are joined with the internal asset record in Vantage, allowing security and OT teams to see whether an externally rated issue traces back to a host that is also relevant to industrial operations.

Integration Prerequesites