Armis targets manufacturing application security with Centrix platform
Cyber exposure management and security specialist Armis has launched Centrix for Application Security to address emerging vulnerabilities in connected manufacturing and supply-chain applications.
The new platform seeks to secure the complex web of connected production lines, robotics controls, ERP platforms, warehouse management systems, and cloud analytics. With software now linking plant operations with suppliers, logistics partners, and customers, code is becoming more embedded in operations, transforming security vulnerabilities into business risks rather than mere IT concerns.
Armis, a leader in cyber exposure management and security, says the platform unifies application security from development through production. For manufacturers with hybrid infrastructure across multiple sites and regions, the lifecycle covers legacy systems, cloud services, and containerized applications.
Industry data highlights the pressure on application security. Verizon’s 2024 Data Breach Investigations Report finds that exploiting vulnerabilities is a leading way attackers gain access in cyber incidents, with web applications and exposed services often targeted.
Software supply chain events like SolarWinds and Log4j demonstrate how a single vulnerable component can affect thousands of downstream organizations, including industrial operators that rely on third-party software.
Nadir Izrael, CTO and Co-Founder of Armis, focuses on eliminating risk at its source: “To effectively manage risk, it’s essential to get to the root cause of the problem and weed it out.”
Nadir points out that vulnerabilities embedded in code now exist within operational infrastructure: “Code-based vulnerabilities are now part of organizational infrastructure, and AI-generated code makes the problem worse, with far more vulnerabilities than code written by people.
“As enterprises adopt AI-assisted coding and move to continuous development, they need a smarter, more dynamic, and unified way to secure software at scale.”
Manufacturers are increasingly adopting AI-assisted coding tools to accelerate projects such as predictive maintenance systems, production scheduling platforms, and digital supply chain integrations.
Faster development cycles mean security teams must review source code, open-source dependencies, container images, and configuration files without slowing down deployment.
Armis Centrix Platform
Armis Centrix for Application Security scans applications across various programming languages and variants. The platform analyzes code, dependencies, container images, and configuration files, then maps findings across the CI/CD pipeline into production environments.
For manufacturers with distributed plants and remote assets, the awareness helps tie vulnerabilities directly to operational impact.
If a flaw in a supplier integration module or a plant management app goes unnoticed, it can quickly move from development into live systems.
The Open Worldwide Application Security Project (OWASP) still lists injection flaws, insecure design, and software supply chain weaknesses among the top application risks.
Weaknesses often stem from third-party libraries and open-source components that comprise a large portion of enterprise codebases.
Armis says Centrix reduces false alarms by 70 percent and helps teams resolve issues faster by sending them directly to the responsible developer with remediation guidance.
In manufacturing organizations where IT, engineering, and operations teams coordinate across different sites, clear ownership of vulnerabilities speeds up response times.
Dana Gilboa, Chief Product Officer at Armis, shares the platform’s approach: “Armis delivers smarter detection, faster fixes, lower costs, and stronger trust between security and development teams.”
Dana explains that the technology goes beyond pattern-based detection in just a few languages: “Other solutions can’t compete.
“Armis’ AI moves beyond the pattern-matching capabilities offered by other providers and is highly accurate, catching all vulnerability variants across countless languages, not just a handful.”
Dana continues, “This solution is the enterprise foundation for secure-by-default software delivery at scale.”
Manufacturers often operate in mixed development environments, combining legacy plant-control apps with cloud-native systems for analytics and logistics.
Armis Centrix aims to provide unified visibility across these environments, eliminating the need for separate security workflows.
AI coding pressure
AI-assisted development brings both speed and new risks. Developers can roll out features and integrations faster, but security teams need to review new code just as quickly.
In manufacturing, how fast you respond to vulnerabilities affects production uptime and supply chain commitments.
“With AI-assisted coding, developers can ship faster, but they can also introduce vulnerabilities just as quickly. As a result, security teams feel the pressure to keep up,” says Katie Norton, Research Manager, DevSecOps and Software Supply Chain Security at IDC.
Katie highlights AI-native scanning and context awareness as key to supporting today’s development speeds: “The AI-native scanning, platform-level context, and independent validation Armis Centrix delivers could benefit security teams trying to keep up in this new era.”
Armis says Centrix fits right into existing development and security stacks. Manufacturers often use static analysis, dynamic testing, and container security tools separately. A unified approach can reduce complexity while keeping oversight intact across environments.
CASTLE benchmark C@250
Armis Centrix for Application Security earned top marks in the Public CASTLE Benchmark C@250. The benchmark is independent validation for a solution’s ability to detect and stop code issues before deployment.
Independent verification matters in procurement, especially for manufacturers who need to show due diligence to leadership, insurers, and regulators.
As operational technology networks merge with IT systems, application security becomes part of plant resilience and compliance.
Armis places Centrix within its broader cyber exposure management platform, which provides real-time visibility across on-premises systems and cloud infrastructure.
For manufacturers operating across global supply chains, securing the code behind production systems now aligns with uptime, risk management, and partner accountability.
Source:
