Device Authority launches KeyScaler 2025 with AI automation

Device Authority has released KeyScaler 2025, an update to its IoT identity security platform that introduces enhanced automation, a redesigned user interface, and new support for industrial edge environments.

KeyScaler 2025 has been developed in response to increasing security concerns related to unmanaged IoT devices, which remain a significant vector for cyberattacks. Industry research indicates that one third of data breaches involve an IoT device and more than half of these devices have critical vulnerabilities that are susceptible to exploitation.

The new platform release emphasises alignment with the latest recommendations from the National Institute of Standards and Technology (NIST), aiming to simplify and secure the full lifecycle of unmanaged devices. A key component of this update is the integration of AI-supported automation throughout the platform, intended to allow for more effective and hands-off remediation of device vulnerabilities.

An important element of KeyScaler 2025 is its newly designed user interface, which streamlines device onboarding and lifecycle management. The company states that the interface is both faster to operate and provides greater visibility and control over an organisation's IoT identity estate. Enhanced insight and accessibility are central themes for this release, with the intent of making lifecycle management of large device fleets more practicable for IT and security teams.

KeyScaler 2025 introduces a new Edge Remote Access Controller, which provides policy-based, secure remote access to IoT and operational technology (OT) devices at the network edge. This is particularly pertinent for industrial adopters following the Purdue model for manufacturing, as it supports secure management of device identities within segmented industrial control system layers.

Device Authority's Chief Executive Officer, Darron Antill, commented on the new release, explaining the rationale and expected impact:

"KeyScaler 2025 is the result of listening to our customers and the market who are requiring even greater visibility, control and automated remediation of their unmanaged device security. Incorporating AI-powered features into the core platform and introducing new innovative approaches to Edge security management ensures that even the most vulnerable devices remain secure without the need for human intervention, therefore significantly reducing business risk. The platform's faster and simpler integrations and ease of deployment make this an even more frictionless experience and is a further step to helping organizations achieve complete end to end device and data trust."

The integration of artificial intelligence is intended to reduce the requirement for manual intervention in the security management of IoT devices. By automating processes such as threat detection, response, and remediation, Device Authority states that organisations can achieve improved security outcomes and decrease business risk arising from unmanaged devices.

The Edge Remote Access Controller is being positioned as a solution for the secure enforcement of access policies at the industrial edge. By managing and governing remote connectivity according to organisational policies, the tool is designed to provide compliance with diverse cybersecurity regulations and frameworks, including requirements set out under the EU Cyber Resilience Act as well as anticipated U.S. Department of Defense guidance for OT/IoT systems.

Device Authority also highlights its automated and closed-loop protection model. This approach aims to mitigate the impact of human error, speed up incident response, and minimise regulatory risk by providing end-to-end visibility and control across potentially vast and complex device estates.

According to Device Authority, major OT/IoT deployments can see device identities outnumbering human identities by a factor of 45 to 1. This rising proportion of nonhuman identities within enterprise environments has made the management and protection of such assets a growing priority for security professionals.

KeyScaler 2025 and its associated tools, including KeyScaler-as-a-Service (KSaaS) and a discovery tool for nonhuman identities and vulnerabilities, are part of Device Authority's strategy to help organisations adapt to an increasingly connected and regulated landscape. The company emphasises the need for complete visibility and intelligent automated controls as the scale and importance of IoT deployments continue to grow.