Claroty Named a Leader and a Customer Favorite in OT Security by Leading Independent Research Firm

Claroty was named a Leader and “Customer Favorite” in Forrester’s Forrester Wave™: Operational Technology Security Solutions, Q3 2026, receiving the highest score possible in nine criteria across offering and strategy. The report highlights strong capabilities in vulnerability/risk posture management and OT-focused Zero Trust remote access with audit trails, alongside investments in R&D including an “OT-native AI security agent.” The news supports positive positioning for Claroty’s AI-enabled OT security platform, though it is primarily an analyst-report catalyst rather than a financial update.

Analysis

This is more useful as a signal on budget prioritization than as a direct read-through to vendor revenue. OT security buying still looks trust- and deployment-led, which favors vendors with deep industrial workflows, low-friction implementation, and channel leverage; that is a relative advantage for names like FTNT and CSCO in secure access/network adjacencies, while pure-play point solutions without clear OT differentiation may face slower win rates and more discounting.

The second-order effect is on the broader industrial stack: if buyers are standardizing around remote monitoring, audit trails, and SOC integration, the spend shifts from one-off tools toward platform bundling and services-led deployment. That benefits system integrators and large industrial automation vendors over niche security vendors, but it also means margins may stay pressured because pricing flexibility is increasing faster than category maturity. In other words, the market is growing, but vendor power is not yet proven.

Time horizon matters: today’s move is mostly sentiment. The real catalyst path is 1-3 quarters, when budget conversions show up in security attach rates and renewal economics; the 6-18 month story depends on whether a major plant incident or regulation forces broader adoption. The contrarian risk is that the analyst validation gets overread as proof of earnings leverage, when it may simply confirm an still-competitive market with buyers retaining leverage on price.

For public comps, IT and FORR get only a mild halo from continued analyst relevance; the bigger issue is whether this category expands enough to justify premium multiples in industrial cyber. Falsifiers are simple: delayed OT budgets, no improvement in deployment conversion, or evidence that price concessions are rising faster than ARR growth.

Key Decisions for Investors

• No immediate trade in FORR or IT on this headline; treat it as sentiment-only until the next print shows actual subscription or billings acceleration.
• Buy FTNT on a 3%-5% pullback as a 6-12 month proxy for secure access and OT-adjacent spend; upside is category budget share gains, but stop out if enterprise security bookings decelerate.
• Consider a relative-value long IT / short FORR pair if you want to express confidence in analyst-franchise monetization; IT has the stronger structural moat and cleaner conversion to cash flow over the next 12 months.
• Set an alert for a critical-infrastructure ransomware event or new OT-security regulation; that is the real catalyst for industrial cyber spend and would validate a more aggressive long basket in FTNT/CSCO/HON.