What reporting formats are supported?

The skill generates CSV-formatted asset inventories and structured text-based reports detailing asset distribution across the Purdue Model levels.

Can I identify vulnerabilities with this skill?

Yes, the skill includes functions to retrieve and correlate critical vulnerabilities (CVEs) with discovered assets directly from the Claroty platform.

How does this help with IEC 62443 compliance?

A foundational requirement of IEC 62443 is a complete and accurate asset inventory; this skill automates the collection and validation of that data, including firmware and hardware revisions.

Do I need a Claroty subscription to use this skill?

Yes, this skill requires an active Claroty xDome SaaS subscription or on-premises deployment and a valid API token for communication.

Is active scanning safe for my PLC network using this skill?

Yes, the skill provides configuration for Claroty Edge, which uses native industrial protocols and includes safety controls like exclusion lists for Safety Instrumented Systems (SIS) to prevent operational disruption.

Claroty ICS Asset Discovery

Name: Claroty ICS Asset Discovery
Author: micsapp

bymicsapp

0•

Security & Testing

Automates the discovery and inventory of Industrial Control System (ICS) and Operational Technology (OT) assets using the Claroty xDome platform.

This skill provides specialized automation for gaining deep visibility into industrial environments by leveraging the Claroty xDome API and Claroty Edge. It enables security engineers to map assets across all Purdue Model levels—from Level 0 sensors to Level 5 enterprise networks—using a combination of passive monitoring and safe, protocol-aware active queries. The skill automates the generation of detailed inventory reports, Purdue Model distribution analysis, and vulnerability enrichment, making it an essential tool for IEC 62443 compliance, risk assessments, and identifying shadow OT devices in complex brownfield environments.

Key Features

01Automated ICS/OT asset extraction via Claroty xDome API

02Configuration templates for safe, protocol-aware active discovery

03Purdue Model distribution reporting for industrial network mapping

04CSV inventory export for compliance and risk assessment documentation

05Critical vulnerability correlation for discovered industrial assets

060 GitHub stars

Use Cases

01Establishing a baseline asset inventory for brownfield OT environments

02Detecting unauthorized shadow OT devices and network communication anomalies

03Conducting IEC 62443 compliance audits and industrial risk assessments

Key Features

01Automated ICS/OT asset extraction via Claroty xDome API

02Configuration templates for safe, protocol-aware active discovery

03Purdue Model distribution reporting for industrial network mapping

04CSV inventory export for compliance and risk assessment documentation

05Critical vulnerability correlation for discovered industrial assets

060 GitHub stars

Use Cases

01Establishing a baseline asset inventory for brownfield OT environments

02Detecting unauthorized shadow OT devices and network communication anomalies

03Conducting IEC 62443 compliance audits and industrial risk assessments