Highlights –

  • Skybox challenges the status quo by taking a dynamic, novel approach to Cyber Asset Attack Surface Management (CAASM).
  • Skybox Security is the only solution with over 150 integrations that creates a thorough model of a customer’s distinct hybrid environment, including all of the customer’s L3 devices.

Cybersecurity management platform startup Skybox Security Inc announced a new version of its award-winning Security Posture Management Platform. The release claims to include the market’s first Software-as-a-Service (SaaS) solution for Security Policy and Vulnerability Management. Thrusting its worldwide customer base into the next phase of proactive cybersecurity, significant advancements improve its platform that continuously analyzes attack feasibility, exposure, remediation alternatives, and compliance across hybrid settings.

Growth in Cyber Asset Attack Surface Management

Skybox challenges the status quo by taking a dynamic, novel approach to Cyber Asset Attack Surface Management (CAASM). Skybox uses API integrations to visualize all assets, identify and prioritize vulnerabilities using proprietary threat intelligence, recognize gaps in security controls, and automatically generate remediation options. Customers may dynamically model operational technology, IT, and hybrid cloud systems, including all networking and security data relevant to a single asset, thanks to major enhancements to the proprietary Skybox network model.

In line with Gartner Research: “CAASM enables security teams to improve basic security hygiene by ensuring security controls, security posture, and asset exposure are understood and remediated. Organizations that deploy CAASM reduce dependencies on homegrown systems and manual collection processes and remediate gaps either manually or via automated workflows. Organizations can visualize security tool coverage, support attack surface management (ASM) processes, and correct systems of record that may have stale or missing data.”

First solution in the market to automatically map vulnerabilities to malware type

Skybox also unveiled the first Security Posture Management solution in the market, which links Threat Hunting with Vulnerability Management. Building on its Exposure Management process, which emphasizes publicly known vulnerabilities and identifies control gaps, Skybox now also relates vulnerabilities to malware by name, category and various classes such as ransomware, Remote Access Trojans (RATs), botnets, cryptocurrency miners, trojans, and more.

Integrations minimize complexity and administrative load and improve cybersecurity

Skybox Security is the only solution with over 150 integrations that creates a thorough model of a customer’s distinct hybrid environment, including all of the customer’s L3 devices. Increased integrations consist of the following:

Amazon Web Services (AWS): The company’s expanded cloud capabilities cover support for AWS firewalls in distributed mode. Minimize risk while verifying compliance by removing permissive, out-of-date, shadowed, and redundant rules.

Cisco Application Centric Infrastructure (ACI): By incorporating additional features into its Cisco ACI integration, Skybox now offers granular visibility into ACI Fabric tenants across spanning networking, micro-segmentation policies, and device attributes.

Palo Alto Networks Prisma Cloud: In keeping with its goal to shift-left security practices, Skybox’s multi-factor risk score methodology now allows for identifying and prioritizing vulnerabilities in container images across DevOps toolchains.

Increased flexibility, scalability, business agility, and resilience in Skybox Cloud Edition speed up customer value

Skybox Cloud Edition offers the capabilities of the Skybox Security Posture Management Platform as a Software-as-a-Service (SaaS) offering to increase corporate agility and resilience benefits.

First SaaS solution for security policy management: Cloud Edition capabilities cut down on software installation maintenance activities, outpacing the competition. To satisfy customer needs, simplified licensing and deployment have been developed.

Advanced Vulnerability and Exposure Management: Customers can choose the deployment model that matches their business and regulatory needs, thanks to the industry’s most flexible deployment options for Vulnerability and Exposure Management (both on-premises and SaaS versions).

Infinite scalability: Manage security policies, rank vulnerabilities, and fix exposures in the most complicated on-premises, cloud, Operational Technology (OT), and hybrid settings. Automate, verify and operationalize risk mitigation.

Options for quicker deployment: It decreases the time needed for deployment and eliminates the need for hardware acquisition, testing, and update installation. This allows customers to get benefits more quickly. Due to the size and variety of their attack surface, customers with large, international settings stand to benefit significantly.

Quick automated updates: Customers gain from the newest platform changes and product advancements. Upgrades cause significantly less disruption and don’t require any resources for change management. An automated, seamless updating process is essential given the shifting regulatory and threat environments.

Assured availability: For exceptional stability, performance, and guaranteed availability, the solution is hosted in AWS. Additionally, round-the-clock monitoring of tenants across the Network Operations Center (NOC) and Security Operations Center (SOC) maintains optimal network performance and conducts real-time analysis for ongoing threat mitigation.

Experts’ Take

According to Gidi Cohen, CEO, and Founder of Skybox Security, “Today, we’re delivering on our mission of building the world’s leading Security Posture Management platform. Skybox equips customers with the hybrid network modeling, path analysis, and automation they need to reduce the risk of a significant data breach by 55%. Our latest innovations are significant for customers that deploy on-prem, as well as customers that will benefit from our new SaaS solution. The new Skybox Cloud Edition offering capitalizes on the speed, scale, innovation, and productivity benefits powered by the cloud to drive the pursuit of broader digital business opportunities.”

According to Ran Abramson, Threat Intelligence Analyst, Skybox Research Lab, “Executives and board members want to know if their cybersecurity teams are staying ahead of the latest celebrity malware such as TrickBot, REMCOS, FormBook, AZORult, Ursnif, Agent Tesla, and NanoCore. Powered by Skybox threat intelligence, CISOs have automated analysis that can prove they retired millions of malware and exploits. No other cybersecurity solution can provide customers with our advanced vulnerability prioritization and threat trend reporting.”