The IoTSecure IoT-mini^TM is a free IoT security tool that makes it fast and easy to address common IoT security challenges. The IoT-mini is fits in the palm of your hand and runs off USB power connected to any ethernet jack on the network.The IoT-mini^TM is completely automated. When you get your IoT-mini and connect it to the network, it will:

1. Discover, track and identify IoT devices
2. Safely detect IoT-specific vulnerabilities that vulnerability scanners often miss
3. Summarize IoT inventory and vulnerabilities in the report

The IoT-mini^TM is also aware of any new devices that connect to the network.  When new devices connect, the IoT-mini^TM will also begin to profile them to be identified and checked for IoT vulnerabilities. Also, there are no agents to install, no network TAPs, and there is no tuning.

Safe on Devices: The IoT-mini^TM uses a proprietary non-intrusive technique called PortSafe^TM Inspection. Unlike vulnerability scanners, PortSafe^TM will not interfere with devices as it discovers, identifies, and does vulnerability detection on devices.

Safe on the Network: Unlike competitve solutions, the IoT-mini^TM does not use network TAP/SPAN ports, so there is no addition load on the switch to duplicate packets which can cause network performance issues. Also, the IoT-mini^TM generates only a small fraction of traffic vs. network scans.

The Benefit: Now you can safely and confidently discover and vulnerability test sensitive and resource-constrained devices that are excluded from intrusive vulnerability scans, without concern of crashing devices or causing network performance issues.

The IoT-mini^TM will only use locally accessible network information protocols to obtain information about local devices to be profiled. As such, no data could be used to identify or attack any customer. The data would be useless without direct access to the network, and direct access to the network would allow access to this information anyway.

The IoT-mini^TM will connect to our CloudPortal® a minimum of every 5 minutes to access the updates and databases that help determine what tests to perform for a given device. There is no collection of packets or any potentially sensitive data in any way, not directly to the appliance itself or out to our CloudPortal®. Any data that is retained is stored in the geographic region of the customer’s choosing.

The IoT-mini^TM will attempt to communicate with devices to assist in device profiling and vulnerability detection. This communication is minimal, a small fraction of the traffic in comparison to network scanners, and done interatively to avoid any impact to the device or network.

These measures provide assurance to our customers and partners that we will not gather or maintain any of their sensitive or protected information in our systems and that we be safe on the network and to devices.

The Internet of Things (IoT) is a general category of connected devices that do not necessarily meet the classic description of a computer and are commonly designed for a single purpose. Examples of IoT devices include medical devices, HVAC controllers, door access controllers, IP Cameras, Smart TVs, smart watches, and speakers.

Virtually every network, whether a large corporate intranet or a simple home Wi-Fi network, has IoT devices on it. Most are unknown or unmanaged devices and hard to secure, making it challenging to know what IoT is on the network, where they are, where they are communicating, and whether they are vulnerable. Traditional security tools can’t keep up, making dedicated IoT security solutions a critical piece of any enterprise security strategy.

Most IoT devices are unknown or unmanaged devices that are hard to security for a variety of reasons, including:

1. 1. risky default behavior like creating open services, have hard-coded passwords or data collection and transmission on their own to other devices
   2. lack built-in security and security patching from the manufacturer
   3. can’t run endpoint agents or don’t produce logs, so they are hard to monitor
   4. can’t be scanned for vulnerabilities because they are resource constrained and easily crash
   5. create Shadow IT problems as they are easily deployed without IT oversight

We have a limited supply of IoT-minis^TM available. When you request an IoT-mini^TM, we will notify you within 48 hours if we have one available. Once approved, you can expect a simple package with all you need to begin base lining your IoT inventory and security posture. The package includes the IoT-mini, a USB-USB-mini, CAT6 Ethernet cable, and a power brick for the USB cable if there is no USB port to power the device.

1. 1. risky default behavior like creating open services, have hard-coded passwords or data collection and transmission on their own to other devices
   2. lack built-in security and security patching from the manufacturer
   3. can’t run endpoint agents or don’t produce logs, so they are hard to monitor
   4. can’t be scanned for vulnerabilities because they are resource constrained and easily crash
   5. create Shadow IT problems as they are easily deployed without IT oversight