Claw & Talon

Dossier · Private startup · 2 independent sources

DeviceTotal

Cybersecurity Dual-Use Technology Priority Signal Founded 2018

Last updated: Jul 31, 2026

DeviceTotal is an Israeli cybersecurity company providing agentless device-risk intelligence for IoT, OT, network, and security devices. Its SaaS and API products consolidate vendor-verified vulnerability, firmware, end-of-life, and remediation data into device-, site-, and organization-level risk decisions.

Visit Website

Company Overview

DeviceTotal is building an intelligence layer for connected-device security rather than another endpoint agent or network sensor. The company accepts device information through its platform and API, evaluates vulnerabilities, exploitability, firmware status, end-of-life or end-of-support exposure, and vendor workarounds, then presents risk at unit, site, and organization levels. Its stated agentless model avoids installing software on operational equipment or actively probing a production network. That is particularly relevant for medical, industrial, building-management, network, and other devices that cannot run conventional endpoint agents or tolerate intrusive discovery. The product positioning is therefore closer to device-security posture management and vulnerability intelligence than to full incident detection or replacement of an OT monitoring stack.

The commercial problem is credible: asset owners often have incomplete inventories, inconsistent manufacturer advisories, unsupported firmware, and vulnerability records that do not map cleanly to the exact model or version deployed. DeviceTotal's public product material emphasizes vendor-sourced and structured data, risk scoring, firmware-version analysis, EOL/EOS tracking, remediation recommendations, and pre-purchase assessment. Its Community Edition provides a low-friction evaluation path for submitting a small number of devices, while the paid Intelligence Edition is described as supporting file uploads, API access, recurring updates, and larger-scale workflows. Those public offerings are useful commercialization signals, but they do not establish customer count, recurring revenue, retention, or independently verified coverage.

The competitive field includes OT asset-management and exposure-management vendors such as Claroty, Nozomi Networks, Armis, Forescout, and Microsoft Defender for IoT, as well as broader vulnerability platforms from Tenable, Qualys, Rapid7, and device-specific specialists such as Sternum or SecuriThings. DeviceTotal's differentiation is the combination of non-invasive collection, device-specific vendor intelligence, lifecycle and firmware context, and a claimed route from risk identification to an actionable fix. That can complement network-monitoring products, but the company must prove that its data is fresher, more precise, and more useful than the device and vulnerability enrichment already bundled by larger platforms. Its API and pre-purchase workflow could broaden the addressable buyer set beyond SOC teams to procurement, engineering, risk, and compliance functions.

The technology has substantive dual-use potential because the same unmanaged-device visibility problem affects defense estates, hospitals, utilities, factories, transportation systems, and government facilities. In a defense or national-security environment, a vendor-verified view of vulnerable models, unsupported firmware, and compensating workarounds could support exposure prioritization without placing agents on mission systems. That is a plausible strategic adjacency, not evidence of defense deployment: the reviewed public material does not verify government contracts, classified use, security certifications, or operational outcomes. The principal diligence questions are data provenance and update SLAs, actual device and vendor coverage, false-positive and false-negative rates, deployment prerequisites, customer references, security of submitted inventories, and the company's ability to convert a technically differentiated data product into repeatable enterprise and public-sector revenue.

Dual-Use Assessment

Military & Commercial Applications

DeviceTotal's core capability—agentless, device-specific exposure and lifecycle intelligence—has clear commercial and defense applicability. It can help critical-infrastructure and industrial operators prioritize vulnerable devices, while defense and government teams may use the same analysis on constrained or mission systems where installing agents or performing intrusive discovery is undesirable. Public evidence supports the applicability, but does not verify defense customers, government contracts, classified deployment, or certification.

Strategic Fit Assessment

Research priority signal

Priority signal means this entry may be worth researching within the Claw & Talon thesis. It does not mean investable, suitable, endorsed, available, or likely to produce returns.

DeviceTotal fits the database's dual-use cybersecurity thesis because it targets a persistent visibility gap around devices that conventional endpoint tools cannot easily instrument. The official site shows a productized platform, API documentation, and a community-to-paid offering path; public company material also identifies an experienced cyber leadership group and seed investors. The priority signal remains conditional rather than an investment recommendation: public evidence does not establish revenue scale, customer concentration, retention, funding detail, independent efficacy benchmarks, or defense procurement. Diligence should focus on the quality and defensibility of the underlying data, conversion from evaluation to paid usage, and whether larger exposure-management suites can reproduce the workflow.

Strategic Value to U.S.-Israel Alliance

DeviceTotal could strengthen cyber resilience for Israel-aligned and allied critical infrastructure by making device-level exposure, firmware status, lifecycle risk, and vendor mitigations easier to compare across heterogeneous estates. Its agentless posture is relevant to constrained OT, healthcare, and mission environments, and its pre-purchase capability could prevent insecure devices from entering a network. The strategic value is mainly an intelligence and prioritization layer that can complement monitoring and response systems; it should not be treated as a substitute for segmentation, detection, patch governance, incident response, or assurance controls.

Key Technologies

  • Agentless IoT and OT device-risk assessment
  • Vendor-verified vulnerability and advisory data normalization
  • Firmware-version and EOL/EOS intelligence
  • Device, site, and organization risk scoring
  • Remediation and vendor-workaround recommendation workflows
  • Secure file-upload and API-based device intelligence
  • Pre-purchase device security assessment

Use Cases & Applications

  • Prioritize vulnerabilities across unmanaged industrial and IoT devices
  • Assess medical-device and healthcare-technology exposure
  • Track firmware, EOL, and EOS risk across operational estates
  • Support SOC and vulnerability-management triage without installing agents
  • Evaluate device security before procurement or network deployment
  • Provide risk evidence for critical-infrastructure governance and compliance
  • Enrich defense or government asset-risk reviews where passive collection is preferred

Sources and verification

This profile is based on public-source research, Claw & Talon curation, and editorial judgment. Inclusion does not imply endorsement, partnership, investment, or a recommendation to transact. Readers should still confirm current status, customers, funding, and product claims before relying on this profile. The editorial policy explains how profiles are researched, where automated drafting is used, and how corrections work; the research methodology documents how evidence is graded, what counts as an independent source, and why some profiles are excluded from search indexing.

This record lists 6 public references used for company identity, status, positioning, or material-claim review.

Public sources

The links below are visible public references used for source discipline around company identity, status, funding, customer, acquisition, public-company, or other material claims where available.

Related sector

See the Cybersecurity sector page for market context, related subcategories, and other Israeli companies in this part of the database.

Related companies

Wiz Cybersecurity Irregular Cybersecurity Sweet Security Cybersecurity Zafran Security Cybersecurity Cyera Cybersecurity