1.Claroty
New York, NY, USAIoT/OT visibility, risk and secure remote access services.
Visit website →List & Promote Your Business to the Right Audience — Starting at $100
Security and Privacy Companies
Review leading iot security companies serving USA clients, with company profiles that explain each provider's expertise, delivery focus and fit.
Use the comparison to build a shortlist, then review each company profile for its specialty, location and approach.
Updated October 10, 2026
Side-by-side comparison of leading providers serving USA clients
| Company | Specialty | Location | Website |
|---|---|---|---|
| #1Claroty | IoT/OT visibility, risk and secure remote access services. | New York, NY, USA | Visit site |
| #2Armis | Agentless IoT/OT asset intelligence and risk services. | San Francisco, CA, USA | Visit site |
| #3Nozomi Networks | OT/IoT visibility, threat detection and consulting. | San Francisco, CA, USA | Visit site |
| #4Forescout | Device visibility and IoT/OT network security services. | San Jose, CA, USA | Visit site |
| #5Palo Alto Networks IoT Security | IoT security integrated into NGFW with deployment services. | Santa Clara, CA, USA | Visit site |
| #6Dragos | ICS/OT cybersecurity platform, threat intel and IR services. | Hanover, MD, USA | Visit site |
| #7Cisco Cyber Vision | OT/IoT visibility and industrial cybersecurity services. | San Jose, CA, USA | Visit site |
| #8Ordr | Connected device security with clinical and IoT focus. | Santa Clara, CA, USA | Visit site |
| #9NCC Group | IoT and embedded hardware/firmware security assessments. | Manchester, UK | Visit site |
| #10Bishop Fox | Offensive IoT/embedded pentesting and product security reviews. | Tempe, AZ, USA | Visit site |
Use this comparison to identify a shortlist, then review the detailed company profiles and USA buyer’s guide below.
Review the available information for each provider before requesting references, pricing and a project proposal.
IoT/OT visibility, risk and secure remote access services.
Visit website →Agentless IoT/OT asset intelligence and risk services.
Visit website →OT/IoT visibility, threat detection and consulting.
Visit website →Device visibility and IoT/OT network security services.
Visit website →IoT security integrated into NGFW with deployment services.
Visit website →ICS/OT cybersecurity platform, threat intel and IR services.
Visit website →OT/IoT visibility and industrial cybersecurity services.
Visit website →Connected device security with clinical and IoT focus.
Visit website →IoT and embedded hardware/firmware security assessments.
Visit website →Offensive IoT/embedded pentesting and product security reviews.
Visit website →Compare delivery models, rates, contracts and risk before selecting a provider for a US engagement.
This page lists 10 iot security companies providers that work with United States clients. We look at delivery track record, whether the team overlaps with US time zones, how they scope and price work, and whether they can sign standard US contracts including an MSA, SOW, NDA and mutual indemnity.
Firms currently featured include Claroty, Armis, Nozomi Networks, and Forescout.
Delivery footprints on this list span New York, NY, USA, San Francisco, CA, USA, San Jose, CA, USA, and Santa Clara, CA, USA, so you can choose between onshore US delivery, nearshore teams with 3–5 hours of overlap, and offshore teams priced for volume work.
US buyers usually see three engagement models for iot security companies: fixed-scope projects, time and materials with a monthly cap, and a dedicated team retainer. Onshore US consultancies typically bill $153–$250 per hour, nearshore partners in Latin America $55–$95, and offshore teams $25–$55.
Ask for a rate card by role, not a blended rate — a blended number hides how much of the work is done by junior staff. For fixed-bid work, insist on a written change-order process, and for retainers, confirm the notice period and any minimum monthly hours.
Watch the total cost of ownership: discovery workshops, knowledge transfer, post-launch support, and the cost of taking the work back in house at the end.
Before you sign, confirm the provider carries professional liability (E&O) and cyber insurance with US-acceptable limits, and that the MSA clearly assigns IP ownership of all deliverables to you on payment.
If the engagement touches regulated data, get the compliance posture in writing: SOC 2 Type II for the provider's own systems, HIPAA with a signed BAA for health data, CCPA/CPRA handling for California consumer data, GLBA for financial services, and background-check policies for anyone with production access.
Also nail down worker classification and subcontracting — many US buyers require written approval before any part of the work is passed to a third party.
Run the same questions past two or three firms from this list and compare the answers side by side — the differences are usually more revealing than the proposals.
Practical answers for USA clients comparing providers, pricing and engagement models.