Intelligent vulnerability management from CORE Security

CORE Security launched Insight 3.0, which delivers multi-vector vulnerability assessment, asset categorization, threat simulation, penetration testing and security analytics, all in the context of network topography.

This combination feeds a unified security risk management console that streamlines the entire vulnerability management lifecycle – prioritizing and reducing risk in the context of business, regulatory compliance and operational metrics.

Today’s attacks on organizations are much more likely to be targeted, stealthy and slow-moving. Vulnerability scanning, virus signatures and firewall rules – even when paired with layered security architectures and consultants to fine tune configurations – rarely close the gap. Business leaders, IT and security stakeholders need to know what’s happening, why it’s happening and what actions to take. They want a single “view” that provides real-time intelligence into their risk posture.

Insight 3.0 provides advanced capabilities for a variety of requirements. For customers who have found that their current threat and risk management programs have come up short in their ability to identify meaningful IT risk at the decision maker and business level, CORE Insight adds Predictive Security Intelligence technology to map a warehouse of security data to actionable risk information.

CORE Insight correlates vulnerabilities, network topographies, and cyber-attack expertise to identify high-probability exposures and attack paths to the assets identified as critical—by the company. This unique combination allows security experts to prioritize and remediate the threats that are most likely to compromise critical assets. Using the intelligence that Insight delivers, organizations can focus resources most efficiently on the high-probability threats. Insight’s advanced reporting capabilities deliver consistent measurement on operational risk at both the executive and technical levels.

For customers that are looking to consolidate their vulnerability scanning, web scanning, pen testing, and threat/risk analysis programs into a single, unified solution, Insight 3.0’s Intelligent Vulnerability Management capabilities will help streamline and refine existing vulnerability management processes. Traditional vulnerability management is a cyclical practice of identifying, classifying, remediating and mitigating vulnerabilities.

For most organizations this practice produces overwhelming amounts of data that is nearly impossible to prioritize and substantiate effectively, or with any consistency, using existing IT security resources or budgets. This commonly results in gaps that create risk and leave an organization vulnerable to attack.

CORE Insight 3.0 helps to solve this issue by consolidating, analyzing and prioritizing the overwhelming amounts of security data. Insight delivers in-depth analysis of this data to accurately identify attack paths, based on known vulnerabilities and exploits, which can be used to compromise network assets.

Insight captures this data to identify the actual vulnerabilities which in turn allows security personnel to remediate the identified network assets far more efficiently. This knowledge allows for better patch management and security resources are used more efficiently and cost-effectively. Insight’s reporting dashboard delivers customized reports based on the user’s role, executive to technical, and helps to answer the question: “How secure is my organization?”