Asimily is the Proactive Cyber Asset Defense Platform, built to reduce risk fast across IoT, OT, IoMT, and IT, without disrupting operations.
Sunnyvale, California
Joined March 2022
- Tweets889
- Following220
- Followers121
- Likes56
When the CMDB lists one set of devices, the NAC sees another, and scanners skip a third, nobody can say which assets carry real risk.
How to build one accurate inventory across IoT, OT, IoMT, and IT:
bit.ly/3Wwbr8t
Most frameworks were written with servers and laptops in mind, and auditors now ask about cameras, controllers, and building systems that can’t run agents.
What NIST CSF 2.0, NIS2, CMMC, NERC CIP, PCI DSS, and DORA expect for those devices:
bit.ly/3WswjgU
In the first hour of an incident, hospital teams need to confirm whether only end-user devices were affected, and that evidence has to exist beforehand.
Lessons from the UNM Health cyberattack, and what to set up this week:
bit.ly/4ySf5Hp
Network segmentation and microsegmentation get used interchangeably, but they contain a compromised device in very different ways.
The differences that matter when you decide where to enforce:
bit.ly/4BrQkUL
Suprising no one, CISA added two PHP flaws (PHP2Shell) to its exploited vulnerabilities catalog. Patching servers is routine. Finding connected devices that bundle PHP is harder. Asimily helps map them. bit.ly/47OBF8K
VLANs that still route to each other, devices nobody has inventoried, and rules nobody revisits keep attack paths open long after teams assume they’re closed.
Seven myths, and how visibility, prioritization, and Policy Simulation retire them:
bit.ly/4yPbbit
Connected devices that trust eMudhra’s G3 root and rarely get trust store updates may still accept certificates that browsers now block.
Our post covers what happened, where to look, and how to reissue or segment affected devices:
bit.ly/47FRkao
Many manufacturers bought their NAC and firewalls a decade or more ago. Very few have turned that infrastructure into segmentation that runs on the plant floor. Asimily CEO Shankar Somasundaram tells Manufacturing Tomorrow how to close that gap: bit.ly/47D7ilB
eMudhra's G3 root issued 8 intermediate CAs with just 3 to 8 bits of entropy. They're revoked, but do you know which CAs your devices trust? Asimily just shipped a way for customers to explore CA and root version data in their own environment. bit.ly/47BJrCM
Asimily has been named a Hot Company in IoT Security in Cyber Defense Magazine’s 2026 Top InfoSec Innovator Awards.
Thank you to the customers and partners who trust Asimily to protect the connected devices their operations depend on.
bit.ly/47t9V9A
Two PHP2Shell CVEs and emergency patches landed today. PHP was clearly detected for about 10% of Asimily customers. Patch first, but attackers scan for the gap. Four layers help: bit.ly/4zMKfRm
If you’re working through PHP2Shell (CVE-2026-109618, CVE-2026-109619), your Asimily deployment is not affected. PHP is not used anywhere in the Asimily Platform, so no action is required from you or from us.
CISA's EseeCloud IP camera advisory names no fixed version. With no patch, the question is who can reach the device. Asimily simulates that policy before it goes live.
bit.ly/47NlFUF
Security and clinical engineering each hold half of what it takes to prioritize medical device risk. Hospitals need both teams building the list together.
Shankar Somasundaram shares insights on risk mitigation in 24x7:
bit.ly/47v6Aa1
OT patches often wait months for a maintenance window. Rank by device context, not CVSS alone: is the PLC reachable, exploitable, and critical to production? Asimily scores CVEs that way.
NIST fully enriches only some NVD CVEs now. A severity score says little about the pump or PLC it lands on. Asimily scores CVEs in device context so teams know what to fix first. bit.ly/3UrUk79
We're honored to share that Asimily has won Gold in the 2026 Merit Awards for Operational Technology (OT) & Industrial IoT Security. Asimily gives industrial teams an agentless, continuously updated inventory without disrupting operations.
bit.ly/4Bal3WC
In the AI era, exploits arrive before patches do – especially for connected devices. Your best defense: segmentation. Limit what an attacker can accomplish, whether or not a fix exists yet.
bit.ly/4dvD6we
