What You Missed on the Expo Floor
Key IoT Security Highlights at RSAC 2025:
- Phosphorus showcased its xIoT Security Platform for proactive device management
- Forescout and NVIDIA announced a partnership to enhance OT network monitoring
- Armis unveiled upgrades to its Centrix platform for real-time visibility and control
- Viakoo demonstrated its IoT Device Firmware Manager for automated updates
- Keyfactor emphasized the importance of post-quantum cryptography in IoT security
IoT security isn’t emerging anymore—it’s exploding. And at RSA Conference 2025, it was impossible to ignore. Our team walked the show floor and sat in sessions like “Deprecated Protocols & EOL Devices: A Hidden Threat in ICS & IoT Networks” where security leaders acknowledged what many teams already feel: every unmanaged sensor, camera, or connected device is now a potential breach point.
This year’s conversations went beyond just visibility. Vendors and practitioners were focused on scaling discovery, automating remediation, and securing everything from industrial sensors to AI-powered assistants embedded in conference rooms. We saw demos of firmware-level defenses, post-quantum key infrastructure, and platforms tackling full lifecycle governance of IoT and OT assets.
If your team hasn’t yet mapped the true scope of its device ecosystem, RSAC 2025 was a wake-up call: IoT risk isn’t coming—it’s already inside your network.
Here’s what stood out from our conversations, briefings, and floor tours.
Proactive Management and AI Integration
Phosphorus introduced its xIoT Security Platform, designed to discover, remediate, and monitor every IoT, OT, and IoMT device without the need for additional hardware or agents. This platform addresses vulnerabilities like default passwords and outdated firmware, which are commonly exploited by threat actors .
Forescout, in collaboration with NVIDIA, announced the integration of Forescout’s 4D Platform with NVIDIA’s BlueField networking technology. This partnership aims to scale network monitoring across complex OT environments, providing enhanced visibility and security management .
Enhanced Visibility and Control
Armis showcased significant upgrades to its Centrix platform, focusing on real-time visibility and control across the full attack surface. The platform’s advancements enable proactive risk reduction through automated insights, helping security teams stay ahead of threats .
Viakoo demonstrated its IoT Device Firmware Manager, which automates the process of updating device firmware, ensuring that devices are not left vulnerable due to outdated software. This tool is particularly valuable for organizations managing a vast array of IoT devices.
Preparing for the Quantum Future
Keyfactor highlighted the necessity of integrating post-quantum cryptography into IoT security frameworks. With the advent of quantum computing, traditional encryption methods may become obsolete, making it imperative to adopt quantum-resistant algorithms to safeguard IoT devices.
What We Heard in the Hallways
“IoT security isn’t just about the devices anymore; it’s about the data they handle and the networks they connect to.”
— Asher Davila, Security Researcher, Palo Alto Networks
“We’re seeing a shift from reactive to proactive IoT security strategies, focusing on continuous monitoring and automated remediation.”
— Curtis Simpson, CISO, Armis
Why It Matters
RSAC 2025 underscored that IoT security is no longer a niche concern—it’s a critical component of enterprise cybersecurity strategies. The proliferation of connected devices across industries has expanded the attack surface, necessitating:
- Comprehensive visibility into all IoT and OT devices
- Automated remediation of known vulnerabilities
- Integration of AI and machine learning for threat detection
- Adoption of quantum-resistant encryption methods
Organizations must evolve their security postures to address the unique challenges posed by IoT devices, ensuring that these endpoints do not become liabilities in their cybersecurity frameworks. Check out our vetted list of IoT Security solution providers.
For more insights and detailed discussions from RSA Conference 2025, explore the full agenda and session recordings available on the RSA Conference website.
