Sold by: Spotlight Security
Security posture management that detects, explains, and fixes exposures across IT, IoT, and OT devices from a single dashboard.
5
Overview
Spotlight Security - Security Posture Management for IT, IoT, and OT
Your network and devices don't need another alert. They need direct fixes.
Legacy cybersecurity platforms were built for IT environments with bolt-on OT support. They identify problems, generate tickets, and wait for expensive professional services to intervene. Spotlight was built differently - from the attack surface up. Point us at one machine and we find the rest, then deploy onto them from the inside with no VPN and no appliance. We check what is exposed, explain it in plain English, and fix it with your approval. Safe to run beside a plant floor by design, not by setting.
One platform replaces three panes of glass. Instead of pivoting between an IT console, an OT monitor, and an IoT portal with zero correlation, Spotlight gives you one inventory across IT, IoT, and OT - the machines with an agent and the machines without - on the same dashboard.
How It Works
Four stages. One dashboard. No mandatory deployment engagement.
01 - Connects Lightweight agents deploy in minutes on Windows, macOS, Linux (x86 and ARM), FreeBSD, and QNX - servers, workstations, Linux-based controllers, HMIs, and cameras. From there they discover the rest of the estate: firewalls, switches, and devices with no host OS to install on.
02 - Detects Agents report what is actually on each machine - open ports, running processes, accounts, patch state, firewall rules - and flag what is exposed or drifting from policy.
03 - Resolves An integrated LLM translates complex logs and code into plain-English explanations. Administrators remediate directly from the dashboard with one-click actions or guided commands. All actions are approval-gated - you approve, Spotlight executes.
04 - Learns Telemetry from every remediation sharpens Spotlight's models, which are tested against containerized attack scenarios with scored checkpoints. Every fix makes the next one faster.
Key Outcomes
- Turn an unknown estate into a known, controllable one - discover every device on your network, including those your endpoint tool will not run on and your OT monitor can only watch
- Reduce mean time to remediation - go from detection to resolution in under a minute with approval-gated, on-device remediation
- Eliminate mandatory professional services - no expensive remediation engagements or surprise service fees, just software that works
- Cover IT, IoT, and OT in a single view - continuous posture and configuration monitoring across all device types
- Deploy without disruption - lightweight agents install in minutes with no VPN, no appliance, and no downtime
- Multi-site and multi-tenant ready - role-based access control and advanced telemetry and reporting included in every plan
Built for Critical Infrastructure
Spotlight is purpose-built for environments where downtime is not an inconvenience - it is a public safety event.
- Manufacturing - Defend production lines, industrial control systems, and connected equipment including plant-floor PCs, industrial IoT, DCS, and protective relays without halting operations
- Electric Utilities and Co-ops - Protect grid infrastructure, SCADA systems, and substation automation from nation-state actors and opportunistic attackers without disrupting power delivery
- Water and Wastewater - Secure treatment plant controls, pump stations, HMIs, PLCs, and distribution systems against increasingly targeted attacks on municipal water infrastructure
- MSPs and Channel Partners - Run one inventory across every client site from a single multi-tenant portal with per-client reporting and role-based access control
Every Plan Includes
- Lightweight agent deployment across all devices
- Continuous posture and configuration monitoring
- Plain-English issue explanations
- Approval-gated remediation
- Coverage for IT, IoT, and OT devices
- Multi-site deployment
- Role-based access control (RBAC)
- Advanced telemetry and reporting
Highlights
- Detect and remediate, not just alert. Unlike legacy tools that stop at generating tickets, Spotlight goes all the way to the fix. Lightweight agents deploy in minutes on Windows, macOS, Linux (x86 and ARM), FreeBSD, and QNX. They discover your full estate - servers, workstations, controllers, HMIs, cameras, firewalls, and switches - then report open ports, running processes, accounts, patch state, and firewall rules.
- One inventory across IT, IoT, and OT. See every device - the machines with an agent and the machines without - on a single dashboard. No more pivoting between an IT console, an OT monitor, and an IoT portal. Spotlight covers the devices your endpoint tool will not run on and your OT monitor can only watch, turning an unknown estate into a known, controllable one. Purpose-built for critical infrastructure including manufacturing, electric utilities, water systems, and managed service providers.
- No mandatory deployment engagement. Point Spotlight at one machine and it finds the rest, then installs onto them from the inside with no VPN and no appliance. Agents deploy in minutes, not weeks. Telemetry from every remediation sharpens Spotlight's models, which are tested against containerized attack scenarios with scored checkpoints so detection improvements are measured, not asserted. Every fix makes the next one faster. Multi-site deployment and role-based access control are included.
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
Devices (networks up to 250) | One monitored IT, IoT or OT device for networks of 1-250 devices. Includes agent deployment, continuous posture monitoring, plain-English findings, approval-gated remediation, RBAC and reporting. First network setup included. | $8.00 |
Devices (networks of 251-1,000) | Same, for networks of 251-1,000 devices. | $6.00 |
Devices (networks of 1,001+) | Same, for networks of more than 1,000 devices. | $4.00 |
The following dimensions are not included in the contract terms, which will be charged based on your usage.
Dimension | Description | Cost/unit |
|---|---|---|
Additional network setup (one-time) | Coverage for each additional network beyond the first. Billed once per network. | $499.00 |
Dimensions summary
You pay per monitored device, and the per-device rate depends on your network size. Three device tiers apply: networks of 1-250 devices, 251-1,000 devices, and 1,001 or more devices. Larger networks move into a lower per-device band. All tiers include agent deployment, posture monitoring, plain-English findings, approval-gated remediation, role-based access control, and reporting. Your first network's setup is included. Each additional network beyond the first carries a one-time setup charge covering discovery, enumeration, and agent deployment for that network.
Top-of-mind questions for buyers
A device is any monitored IT, IoT, or OT endpoint. This includes machines that take an agent, such as servers, workstations, controllers, HMIs, and cameras. It also includes devices with no host OS, like firewalls, switches, and RTUs, which are discovered and assessed from the network and kept in the same inventory.
Your rate is set by which size band your network falls into: 1-250 devices, 251-1,000 devices, or 1,001 or more devices. A network in a larger band uses a lower per-device rate across its devices. The band reflects your network size, not just the devices added past a boundary.
The one-time additional network charge applies for each network beyond your first. Your first network's setup is included at no added cost. The charge covers discovery, enumeration, and agent deployment for that specific network. It is billed once per network, not on an ongoing basis.
spotlightsecurity.ai+1
Helpful?
Vendor refund policy
Contract purchases are refundable within 14 days of a new subscriber first purchase and non-refundable after that. Renewals are non-refundable, so cancel auto-renewal before the renewal date. Pay-as-you-go usage such as additional devices and additional network setup is non-refundable once metered. Metering errors are credited on the next invoice. To request a refund, email sales@spotlightsecurity.ai with your AWS account ID.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Spotlight Security provides support to help you deploy, operate, and troubleshoot across your IT, IoT, and OT environments.
For support inquiries, contact the Spotlight Security team through the company website at <https://spotlightsecurity.ai/> to get assistance with agent deployment, dashboard configuration, remediation workflows, and general product questions. You can also email <support@spotlightsecurity.ai>.If you need help getting started, Spotlight offers a Network Exposure Assessment engagement where you send a firewall config export and select 25 machines. You receive a ranked list of what is exposed, exactly how to fix it, and a guided walkthrough.
For demos and onboarding assistance, you can book a live demo through the Spotlight Security website to see agents find and fix a real issue on a real device.
For refund requests or billing questions related to your AWS Marketplace subscription, please contact Spotlight Security directly through the website or reach out to AWS Marketplace customer support.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Claroty xDome provides comprehensive cyber-physical systems (CPS) security solutions tailor-made for manufacturing, healthcare, and other critical infrastructure networks. These solutions integrate with and protect these environments, regardless of scale, architecture, or existing cybersecurity ecosystems.
Armis Centrix, the A.I. powered Cyber Exposure Management Platform, is powered by the Armis AI-driven Asset Intelligence Engine, which sees, defends and manages billions of assets around the world in real time.
Centrix is a seamless, frictionless, cloud-based platform that proactively mitigates all cyber asset risks, remediates vulnerabilities, blocks threats and protects your entire attack surface.
IOanyT Innovations provides a comprehensive Security Hub Service on AWS marketplace, centralizing and optimizing security alerts and postures across your AWS environment.
Lumen’s Managed Cloud Security Posture Management, powered by Orca Security, provides agentless, continuous cloud security monitoring, compliance support, and expert threat response — all fully managed by Lumen’s trusted security team.
Customer reviews
reviewer2917590
Unified monitoring has protected diverse networks and simplifies real-time device management
Reviewed on Oct 24, 2026
Review provided by PeerSpot
What is our primary use case?
We use Spotlight's software to protect our production manufacturing environment. Our environment spans over 150 OT, IT, and IoT devices across multiple locations and runs multiple OSes. Spotlight allows us to protect and monitor all of our devices in real-time.
How has it helped my organization?
We now have the comfort of knowing that we can monitor and protect all of our networks and their devices across various platforms in real-time. We can interact directly with these devices via natural language. Spotlight also delivers a plethora of useful features: showing all open ports on a given device, showing processes that are taxing the CPU or RAM, showing hard drives that are approaching capacity, showing what devices are vulnerable to a given CVE, and so forth. I feel like I discover new use cases for Spotlight's application all the time.
What is most valuable?
Spotlight's dashboard shows me all of our disparate networks and various devices in one single interface. Furthermore, I don't need to connect remotely to these devices or know their CLIs (command line interfaces) to work with them. Spotlight's AI chat interface means I can configure these devices via a natural language interface that shows the commands that will run on the endpoint, can run them for me, and report the output. Goodbye trawling through online manuals searching for syntax for troubleshooting commands for different kinds of devices. Also, Spotlight's network discovery feature works extremely well and in seconds can map my whole network. More than once it has helped me identify devices that are wrongly configured or misplaced in the network.
What needs improvement?
It is hard to think of any improvements, but I am excited to see and use Spotlight's new features and new user interface that is, I understand, in development and set to be released very soon.
For how long have I used the solution?
We have been using Spotlight for six months.
Which solution did I use previously and why did I switch?
I've used other network management products before, both commercial and open source, but none of them have the range of features, especially the cybersecurity solutions, that Spotlight offers.
What's my experience with pricing, setup cost, and licensing?
Spotlight represents great value to our company. Its pricing is based on monitored device count, so organizations of all sizes and budgets can avail of Spotlight's features.
Which other solutions did I evaluate?
I shopped around for other solutions, but in most cases, they were prohibitively expensive or intended only for much larger OT environments.
What other advice do I have?
None come to mind.