devopsy.kinsta.cloud

Author: devopsy.kinsta.cloud

  • Devo Introduces Content Delivery Service to Revolutionize How Security Teams Defend Their Organizations

    New Devo Content Stream and Devo Security Operations capabilities arm security teams with curated detections and threat intelligence and analytics to combat ever-growing threats

    Cambridge, MA, May 13, 2021—Devo Technology, the cloud-native logging and security analytics company, today announced Devo Content Stream, a new content delivery service that seamlessly delivers high-value content to customers on the Devo Platform. Security teams now have instant, continuous access to pre-built alerts and threat intelligence that can be operationalized in seconds.

    “Even the largest and best funded security teams struggle to stay current with the latest threats,” said Ted Julian, senior vice president of product at Devo. “Legacy on-premises solutions aren’t much help and there’s no easy way to get the latest content in a timely fashion. Our SaaS architecture, now paired with the Devo Content Stream, automatically delivers the latest alerts and detections. As a result, security teams can spend less time writing searches and more time on higher value activities like triaging, investigating and responding to threats.”

    Devo Security Operations is the first Devo application to leverage this new capability, continuously receiving threat intelligence and curated alert content provided by Devo and its partners. As new threats emerge, Devo customers will automatically receive new detections and threat intelligence and be able to put this content into action immediately. No longer will security teams need to build their own alerts or manually curate threat intelligence to keep pace with new and developing threats.

    “With evolving needs and increased data volume, our team needed a solution with on-demand, effective and efficient scalability and visibility,” said Joe Wilson, IT threat intelligence manager, Ulta Beauty. “With Devo Security Operations we’ve found a scalable, cloud-native SaaS solution that shapes and analyzes our data in ways that were not possible previously. Beyond the more robust features at our disposal, we have greater confidence in our data insights. We’re impressed by the platform innovations and look forward to continued enhancements for our company.”

    Devo further announced several updates to its cloud-native next-gen SIEM, Devo Security Operations. Cyberattacks are becoming more sophisticated, leveraging malware that resides only in memory to evade existing defenses. Analysts can now perform memory forensic analysis directly in Devo Security Operations, extending existing forensic analysis capabilities which include network packet capture (pcap) and malware analysis. All findings from memory analysis can be captured and stored within Devo Security Operations investigations.

    Devo also introduced a new set of integrations that maximize existing security tools by using the data and context available within them to enrich investigations, optimize workflow and enable analysts to take more confident action. These new integrations include providers of endpoint detection and response, network traffic analysis, and threat intelligence.

    In addition, machine learning models will now detect hard-to-find signals, including anomalous users and server behavior, DNS tunneling, malicious domains, and anomalous TLS communication.

    “Recent trends in cloud adoption and attacker sophistication require more security data be monitored, collected, and analyzed by security teams,” said Jon Oltsik, senior principal analyst and fellow at ESG. “Organizations need solutions that close the visibility gap and provide content that is timely and operational, empowering security teams to defend against advanced cyberthreats with real-time detections and enriched investigations while maximizing analyst productivity.”

    To learn more about Devo and see these latest product developments in action, visit Devo at RSA Conference 2021 between May 17-20. The Devo Content Stream and the latest version of Devo Security Operations will be generally available in June 2021.

    About Devo
    Devo is the only cloud-native logging and security analytics platform that releases the full potential of your data to empower bold, confident action. With unrivaled scale to collect all of your data without compromise, speed to give you immediate access and answers, and clarity to focus on the signals that matter most, Devo is your ally in protecting your organization today and tomorrow. Headquartered in Cambridge, Mass., Devo is backed by Insight Partners, Georgian, and Bessemer Venture Partners. Learn more at www.devo.com.

  • Query.AI Closes $4.6M in Funding to Accelerate Adoption of Market’s Only Security Investigations Control Plane

    ClearSky Security Leads Seed Investment; Query.AI Browser-based Platform Delivers Real-time Access and Centralized Insights Across Existing Applications Without Duplicating Data

    Brookings, SD, May 13, 2021 — Query.AI, the provider of the market’s only security investigations control plane for modern enterprises, launched today with $4.6 million in seed funding from ClearSky Security, DNX Ventures, and South Dakota Equity Partners. The company will use the funding to scale its go-to-market and engineering teams to meet significant demand for its platform. As part of Query.AI’s launch, Jay Leek, the former CISO of Blackstone, is joining the company’s board of directors.

    Query.AI is founded by Dhiraj Sharan and Andrew Maloney, former engineering and product leaders from Niara and JASK, and backed by the founders of ArcSight, CipherCloud, and Verodin. The platform provides security teams with a simple and cost-effective approach to significantly elevate security investigation and response through real-time access and centralized insights to data across on-premises, multi-cloud, and SaaS applications, without duplicating it from its native locations.

    “Digital transformation is occurring at an unprecedented pace. Organizations are adopting new technologies to modernize their infrastructure and digitize workflows to meet customer needs. Yet a rising challenge facing security teams is that it’s no longer files or systems that get compromised – it’s entire enterprises,” said Jay Leek, managing partner and co-founder of ClearSky Security, Query.AI’s lead seed investor. “The Query.AI platform delivers enhanced speed and visibility by unifying existing security solutions for a much more intuitive and immediate investigations experience. It accesses information where it lives, leveraging native data located in other systems for instant analysis without the need to manually identify, index, and store information. The opportunity to help Query.AI scale is a terrific one for ClearSky Security.”

    Through a privacy-by-design approach and patented browser-based architecture, Query.AI simultaneously normalizes and enriches data across any platform, including SIEM, SOAR, and XDR, to enable investigations without complexity. The security investigations control plane provides guided data exploration and support for natural language processing to eliminate the need for security analysts to be experts in individual systems and give organizations the flexibility to determine where their data is stored and who has access.

    “With Query.AI we’ve been able to federate our investigations across a disparate toolset and automate workflows to enrich data with real-time correlations in support of our incident response processes,” said Carl Steeves, VP of information security operations at Fox Corporation. “Query.AI has enabled us to put a wider set of tools, and the data they hold, at the fingertips of our incident responders.”

    With growing data volumes across an enterprise’s on-premises, multi-cloud, and SaaS environments, as well as security solutions charging by data ingestion, Query.AI delivers an effective way to speed security investigation and response goals while simultaneously reducing costs.

    “Visibility and investigation speed are critical for security teams, and the greatest challenge with legacy solutions is the amount of data that needs to be duplicated from different locations,” said Dhiraj Sharan, founder and CEO of Query.AI. “Query.AI solves this because it pulls the data from where it lives, providing unparalleled access to data in real time. By directly leveraging the ecosystem of industry vendors’ APIs, Query.AI removes the burden of transferring or duplicating data to consolidate control and enable swift investigations and response actions.”

    According to a recent Ponemon survey, 80% of security operation center managers say the complexity of their SOC is very high and diminishing their return on investments. Query.AI employs an index-aware approach to centrally access data stored across multiple platforms to extract greater value from existing investments.

    “With the use of Query.AI, our firm is able to centralize access and analyze data to enable faster, higher-confidence outcomes,” said Joe Oney, security operations manager at Hogan Lovells. “Incident response teams are struggling to keep up with the expanding types, and sources, of data available during the early stages of identification and triage. Query.AI is helping to solve the issues around the expanding complexity of modern IT environments, and the often negative corollary effects on analysts. Query.AI has given us a glimpse into the future of security investigations.”

    For more information, visit http://www.query.ai.

    About ClearSky
    ClearSky is a venture capital/growth equity firm that has been operating since 2012 with offices across the United States. ClearSky invests in companies that offer transformative security solutions with a specific focus on cybersecurity, critical infrastructure security, privacy, data governance and compliance. The firm’s world-class dedicated security team has a proven track record with over 60 years of security investing and practitioner experience. ClearSky also has a highly distinguished advisory board consisting of diverse business leaders and a Fortune 500 CISO Board of Advisors that is unmatched in the industry.

    About Query.AI
    Query.AI provides the market’s only security investigations control plane for modern enterprises. Its patented browser-based platform delivers real-time access and centralized insights across on-premises, multi-cloud, and SaaS applications, without duplicating data from its native locations. For more information, follow Query.AI on Twitter (@Query_AI) and LinkedIn (https://www.linkedin.com/company/queryai), or visit http://www.query.ai.

  • Allego Launches Enhanced Conversation Intelligence Product, Adds Significant New Artificial Intelligence Technology

    Conversation Intelligence provides constructive insights to build stronger person-to-person connections, enhances prospect’s buying experience and boosts sales performance

    Needham, MA, May 11, 2021 — Allego, the leading sales learning and enablement platform provider, today announced the enhancement of its integrated Conversation Intelligence product. The product transforms the company’s Call Coaching module into an end-to-end Conversation Intelligence capability, driving analytics for its suite of comprehensive sales learning and enablement product features.

    With Allego Conversation Intelligence, sales teams can automatically capture calls and virtual meetings, leveraging Artificial Intelligence (AI) to perform transcription across multiple languages, automate coaching, generate alerts, all with a deeper integration with CRMs and calendars. The new release of Allego Conversation Intelligence adds capabilities such as:

    • Surface and act on coachable moments across large teams using AI by automating the analysis of calls to understand seller behavior and performance and posting point-in-time feedback as text, audio, or video messages.

    • Improve productivity and post-sale handoff with automated note-taking and highlighting by accurately capturing call summaries, automatically linking to a call’s recording in a customer’s CRM and skimming behavior insights.

    • Drive efficiencies for managers with automated review flagging, including notifying a manager when a call warrants coaching and flagging best-practice examples to promote to other reps.

    • Automate content recommendations based on call topics by using AI to provide appropriate follow-up content based on call topics or objections expressed and recommend remedial learning content, courses, Flash Drills and role plays.

    • Certify rep proficiency using scorecards and inline feedback by posting point-in-time feedback and associating a configurable scorecard with any given call.

    • Replicate teamwide behaviors with analytics and recommendations for call clips to repurpose as best-practice examples and learning content enriched with knowledge checks and links to other resources.

    • Support global teams conducting calls in a variety of languages and accents using transcriptions in multiple languages.

    “Our latest research found more than 67% of sales leaders feel it’s harder to observe remote sales professionals during calls to provide them with constructive feedback,” said Andre Black, Chief Product Officer, Allego. “With Conversation Intelligence, reps will receive consistent coaching and relevant feedback, increasing their ability to articulate value and build strong rapport with customers, which results in higher win rates and better buying experiences.”

    Playing a Critical Role in End-to-End Sales Enablement

    Allego Conversation Intelligence capabilities empower enablement and training teams to streamline and enhance multiple aspects of the end-to-end sales enablement process.

    • Content Management: Enablement and Marketing teams can mine meeting recordings for messaging accuracy and content effectiveness, and produce or recommend appropriate follow-up content based on call topics and objections expressed by buyers.

    • Coaching and Collaboration: Enablement teams and sales managers can scale their call coaching by leveraging Conversation Intelligence to flag calls that are especially in need of review, and provide video-based point-in-time feedback so constructive criticism will be delivered with the right tone and body language. They can also repurpose call clips to promote as best practice examples for other reps with just a few clicks.

    • Launches and Rollouts: Enablement and Marketing teams can more easily course-correct during the post-launch period based on observations collected across recorded calls. They can clip out video examples of great message delivery for playbooks and learning recommendations.

    • Onboarding and Training: Enablement and Training teams can enhance onboarding and training by capturing real-world “game tape” moments for use in courses, to bring the field experience to life during training. With observations collected across recorded calls, they can clip out video examples of great message delivery for playbooks and learning recommendations, and enrich with knowledge checks, call-outs and links to other resources.

    • Virtual Selling: Sales teams can automate note-taking and capture important information from calls as a basis to upskill reps, improve forecasts, and share key content and call recordings into digital sales rooms to provide a compelling buyer experience.

    “Considering the average sales rep makes 15 calls a day and each call lasts approximately 15 minutes, it’s just not feasible for managers or sales enablement teams to listen to every call to help their team improve. You can’t record all these calls with the expectation to listen to them, nor should you,” said David Bauders, CEO of SPARXiQ.  “Allego’s new Conversation Intelligence relies on AI to ‘listen’ to countless hours of calls for you. This offers sales organizations a host of benefits, including better message consistency, more organized customer conversations, shortened onboarding cycles for new reps, and a way to close the knowledge gap when reps leave.”

    The latest version of Allego Conversation Intelligence is now available to Allego customers as an optional integrated module within the Allego Sales Learning and Enablement Platform, or as a stand-alone product. To learn how Allego Conversation Intelligence can improve your team’s performance, schedule a demo or visit Allego.com.

    About Allego
    Allego provides an all-in-one sales enablement platform that ensures sellers have the skills, knowledge, and content they need to optimize team success in a virtual world. In place of traditional training and content enablement tactics – which are rapidly outdated and often ineffective – Allego empowers reps with the activated content they need to close deals faster, and the personalized coaching and learning they require for continuous improvement. And it all happens in the flow of their daily work. Whether it’s providing feedback to one another through asynchronous video, or enhancing their skills through AI-powered coaching and peer-to-peer collaboration, nearly 500,000 professionals are using Allego to revolutionize the way they onboard, train, collaborate, and sell. To learn more about Allego and learning and enablement in the flow of work, please visit allego.com.

  • BluBracket Secures $12M in Series A Funding to Protect Code from Development to Deployment

    In the wake of SolarWinds, BluBracket advances developer-first tools to secure the newest attack surface

    Palo Alto, CA, May 13, 2021 — BluBracket, the leader in code security, today announced it has raised a $12 million Series A funding round led by Evolution Equity Partners. Evolution is joined by all existing investors including Unusual Ventures, Point72 Ventures, SignalFire and Firebolt Ventures. With this round, BluBracket has raised a total of $19.5 million to date.

    Demand for BluBracket’s code security solutions has dramatically increased since the company launched in 2020, as code continues to be a central corporate asset and a growing attack surface exploited by bad actors. It’s critical that organizations secure their code and pipelines as early as possible in the development lifecycle, well before that code enters production. All BluBracket solutions are developer-first, as the only way to solve code security is by empowering developers to keep issues out of code before production.

    “No company can secure their code without empowering developers. We are passionate about shifting security left and giving companies the tools they need to secure software with every commit,” said co-founder and CEO Prakash Linga. “Our technology solves a pressing issue for both application security and DevSecOps teams. Our new investor Evolution Equity Partners is a powerhouse with deep expertise and connections in the world of cybersecurity. They’re an ideal partner to continue our journey to the forefront of code security.”

    BluBracket will expand its go-to-market activities with significant investments in product-led, developer-first growth, as the BluBracket Community Edition is a free way for developers and security engineers to keep secrets and credentials out of code. BluBracket is already helping secure code and pipelines for thousands of developers across dozens of organizations with its suite of products.

    “We see an exciting new space converging between the software development lifecycle and cybersecurity. The need for security measures at the beginning of and during code development is more important now than ever. We’ve been searching for the right company to partner with to address this market,” said Karthik Subramanian, partner at Evolution Equity Partners. “When we found BluBracket, we saw a tremendous opportunity to place our bet. Their management team has a track record of success in the security industry and their technology has a headstart in this important arena.”

    With “everything as code,” code security becomes paramount.

    As the SolarWinds hack has shown us, code security is a massive challenge in today’s distributed, open and interconnected cloud-native world. The world runs on code, and BluBracket has unique technology to keep it safe and protected without compromising innovation, speed or developer productivity.

    BluBracket has risen quickly from its public launch in 2020 as an RSA Innovation Sandbox finalist and will deploy the new funds to continue development of their Code Security products. The company will further expand its product functionality in key areas such as Infrastructure as Code security, CI/CD integration and keeping sensitive information out of code early in the development process.

    “At Priceline, our technology is a key differentiator,” said Martin Brodbeck, CTO of Priceline. “BluBracket provides a state of the art security solution for our code. By helping us catch security vulnerabilities in code early, this will enable us to innovate quickly and release safely.”

    “Whether it’s infrastructure as code or the models that run our systematic trading strategies, code is in everything we do,” said John Terrill, Chief Information Security Officer at Point72. “BluBracket helps protect that code to keep our business innovating and our information safe.”

    “Detecting secrets in source control has been a pain point for application security since its inception, and a very high risk to the business,” said Andrew Schmitt, Application Security Lead at iHerb. “With BluBracket’s advanced secrets detection capabilities, seamless integrations, and source control governance features, we were able to rapidly advance our application security posture, providing value literally overnight. I don’t think a modern enterprise development program can afford not to have BluBracket.”

    Karthik Subramanian, partner at Evolution Equity Partners, will join John Vrionis of Unusual Ventures and Jim Zemlin of the Linux Foundation on the BluBracket board of directors.

    “Software supply chain security is a pressing need for the industry,” said Jim Zemlin, executive director of the Linux Foundation and board member of BluBracket. “BluBracket has an innovative solution to empower developers to keep sensitive information out of code before it’s committed to Git. Adoption of solutions like BluBracket will help all of us enhance code security.”

    BluBracket’s Community, Teams and Enterprise editions deliver comprehensive code security, allowing companies to:

    • Keep secrets, credentials, PII and sensitive information from code both pre- and post- commit as well as your commit history.
    • Detect and prevent misconfigurations in Git-based systems.
    • Ensure code changes come from trusted developers to maintain software supply chain integrity.
    • Protect valuable IP by preventing and finding code that has leaked outside the enterprise into the public domain.
    • Continuously monitor Infrastructure as Code to find and fix cloud and Kubernetes misconfigurations.
    • Understand risk levels based on who has access to code, including alerts on excess privileges or inactive developers.
    • Keep a chain of custody for important code, for security and compliance activities, and alert users based on anomalies.

    BluBracket does all of this by generating a proprietary risk score so security teams can understand risk quickly to prioritize resources for remediation. Through Machine Learning, BluBracket drastically reduces false positives that are common with other application security tools. The result is code security with every commit that respects developer productivity and innovation. 

    BluBracket currently supports GitHub, BitBucket and Gitlab and delivers pre-built CI/CD integrations with Jenkins, GitHub Actions and Azure Pipelines, as well as leading alerting and ticketing systems. 

    About BluBracket

    By empowering developers to prevent security vulnerabilities early in the software development process and giving security professionals an automated and developer-friendly way to ensure code is secure, BluBracket is the first comprehensive solution for code security. More information can be found at www.blubracket.com

    About Evolution Equity Partners

    Evolution Equity Partners, based in Palo Alto, New York City, London and Zurich invests in fast growing technology companies helping exceptional entrepreneurs develop market leading companies. The firm has a focus on Cybersecurity and adjacent Enterprise Software markets and its partners have been involved as founders, investors and as senior operating executives in leading software companies around the world. Learn more at www.evolutionequity.com and follow us at LinkedIn and Twitter.

  • ZeroNorth Introduces Rapid Integration Connector to Support Broad Range of AppSec and Security Scan Tools

    New Solution Allows Organizations to Quickly Scale AppSec and DevSecOps Programs

    Boston, MA, May 12, 2021 – ZeroNorth, the only company to unite security, DevOps and the business for the good of software, today introduced its Rapid Integration Connector, which allows customers to integrate data from a wide range of application security (AppSec) tools into the ZeroNorth DevSecOps platform.

    With its Rapid Integration Connector, ZeroNorth is delivering support for new AppSec scan tools in less than a day. A library of new connectors will be available to customers, enabling them to quickly scale their AppSec and DevSecOps programs.

    In addition, the new Rapid Integration Connector adds value to ZeroNorth’s partners. Through the tool, VARs, system integrators and service providers can quickly integrate various tools into the ZeroNorth platform as part of a broader customer engagement.

    ZeroNorth automatically normalizes all the vulnerability data from AppSec and security scan tools into a common risk framework. Through its proprietary data refinement process, ZeroNorth can compress thousands of issues into a concise list. This drastically reduces the number of vulnerabilities developers need to resolve, making it far easier and simpler to triage, prioritize and fix throughout the development process.

    Through the ZeroNorth Rapid Integration Connector, customers can:

    • Easily integrate custom AppSec and security scan data into the ZeroNorth DevSecOps platform
    • Translate and format data from any AppSec scan tool for integration into ZeroNorth
    • Normalize, correlate, and compress the results alongside findings from other AppSec and security scan tools
    • Deliver enterprise DevSecOps analytics & reporting across all tools, including those supported via a Rapid Integration Connector

    “With the cluttered nature of the AppSec market, we continue to see customers seek new tool integrations,” said John Worrall, CEO, ZeroNorth. “To support these requirements, quickly, ZeroNorth has launched our Rapid Integration Connector, enabling customers to integrate data from any AppSec scan tool they choose into our platform, where we’ll add insight and refine that information.”

    Out-of-the-box, ZeroNorth delivers integrations with many of market-leading AppSec scan tools from vendors such as Veracode, ShiftLeft, Checkmarx, White Source and Micro Focus, to name a few. With the Rapid Integration Connector, ZeroNorth supports a broader range of scanning tools.

    ZeroNorth’s Rapid Integration Connector is generally available. For more information visit: https://go.zeronorth.io/RapidIntegrationConnector

    About ZeroNorth
    ZeroNorth brings security, DevOps and the business together to improve application security performance and reduce organizational risk. The company’s DevSecOps platform enables organizations to automate and orchestrate key components of their application security program, and to rapidly identify, prioritize and remove the vulnerabilities standing in the way of software excellence. In an age where the security of applications needs to be everyone’s responsibility, ZeroNorth is where organizations come together for the good of software. Learn more at www.zeronorth.io

  • ExtraHop Security Advisory: 67 Percent of Enterprise Environments Still Run Protocol Exploited by WannaCry and NotPetya

    Four years after devastating ransomware attacks, SMBv1 and other vulnerable protocols still running in IT environments around the world

    Seattle, WA, May 12, 2021 — ExtraHop, the leader in cloud-native network detection and response, today released a security advisory about the prevalence of insecure protocols in enterprise IT environments. The report details the ongoing use of deprecated and insecure protocols, including Server Message Block version one (SMBv1), which was exploited by the WannaCry ransomware variant to encrypt nearly a quarter of a million machines world-wide four years ago today.

    In early 2021, the ExtraHop threat research team conducted primary research examining the prevalence of insecure protocols in enterprise environments, specifically SMBv1, Link-Local Multicast Name Resolution (LLMNR), NT Lan Manager (NTLMv1), and Hypertext Transfer Protocol (HTTP). The research uncovered alarming usage of these protocols that expose organizations and their customers to considerable risk.

    • SMBv1: This protocol has been exploited for attacks like WannaCry and NotPetya and can quickly spread malware to other unpatched servers across a network. ExtraHop research shows that SMBv1 is still found in 67% of environments in 2021, more than four years after the EternalBlue and related vulnerabilities came to light.
    • LLMNR: LLMNR can be exploited to gain access to the user credential hashes. These credential hashes can be cracked to expose actual login information that gives malicious actors access to sensitive personal and business data. ExtraHop research found that 70% of environments are still running LLMNR.
    • NTLM: Despite the recommendation from Microsoft that organizations cease use of NTLM in favor of the much more secure Kerberos authentication protocol, NTLM is still quite common. Thirty-four percent of enterprise environments have at least 10 clients running NTLMv1.
    • HTTP: When plaintext credentials are transmitted over HTTP, those credentials are left exposed––the internet equivalent of shouting passwords across a crowded room. Despite the risks, data from ExtraHop shows that 81 percent of enterprise environments still use insecure HTTP plaintext credentials.

    “It’s easy to say that organizations should get rid of these protocols in their environments, but often it’s not that simple. Migrating off SMBv1 and other deprecated protocols may not be an option for legacy systems, and even when it is an option, the migration can trigger disruptive outages. Many IT and security organizations will choose to try and contain the deprecated protocol instead of risking an outage,” said Ted Driggs, Head of Product, ExtraHop. “Organizations need an accurate and up-to-date inventory of their assets’ behavior to assess risk posture as it relates to insecure protocols. Only then can they decide how to remediate the issue or limit the reach of vulnerable systems on the network.”

    Download the full report here: Security Advisory: Insecure Protocol Usage Exposes Organizations to Cybersecurity Risk.

    You can learn more about protocols and threat activities associated with them by visiting the ExtraHop Network Protocol Library.

    About ExtraHop

    ExtraHop is on a mission to arm security teams to confront active threats and stop breaches. Our Reveal(x) 360 platform, powered by cloud-scale AI, covertly decrypts and analyzes all cloud and network traffic in real time to eliminate blind spots and detect threats that other tools miss. Sophisticated machine learning models are applied to petabytes of telemetry collected continuously, helping ExtraHop customers to identify suspicious behavior and secure over 15 million IT assets, 2 million POS systems, and 50 million patient records. ExtraHop is a market share leader in network detection and response with 30 recent industry awards including Forbes AI50, Cybercrime Ransomware 25, and SC Media Security Innovator.

    Stop Breaches 84% Faster. Get Started at www.extrahop.com/demo.

    © 2021 ExtraHop Networks, Inc., Reveal(x), Reveal(x) 360, Reveal(x) Enterprise, and ExtraHop are registered trademarks or marks of ExtraHop Networks, Inc.

  • Keysight Enables Customers to Test Performance of Millimeter-wave Innovations in 5G, Aerospace/Defense and Satellite Communications

    Santa Rosa, CA, May 12, 2021 – Keysight Technologies, Inc. (NYSE: KEYS), a leading technology company that delivers advanced design and validation solutions to help accelerate innovation to connect and secure the world, announced the Keysight N9042B UXA X-Series signal analyzer solution, which enables customers to test the performance of millimeter-wave (mmWave) innovations in 5G, aerospace & defense and satellite communications.

    At mmWave frequencies, signals are more susceptible to impairments that affect the signal quality, such as IQ modulation errors, phase noise, distortion, signal-to-noise ratio, amplitude, and phase linearity. Keysight’s new N9042B UXA X-Series signal analyzer provides wide analysis bandwidth and deep dynamic range to help customers solve their most difficult mmWave challenges including tight design margins and timelines, complex modulation and stringent standards.

    “Understanding signal fidelity is critical to the performance of products in 5G, aerospace and defense, satellite and automotive radar markets,” said Kiran Unni, vice president, industrial technologies practice, Frost & Sullivan. “At mmWave frequencies, signals are more susceptible to impairments that affect the signal quality, such as IQ modulation errors, phase noise, distortion, signal-to-noise ratio, amplitude and phase linearity.  For designers and manufacturers, addressing these challenges is crucial when characterizing and testing the true performance of mmW products.”

    Keysight’s N9042B UXA X-Series signal analyzer delivers the following customer benefits:

    • Ensures designs meet the latest standards with ready-to-use measurement applications and signal analysis software.
    • Sees signals clearly with an unbanded, preselected sweep from 2 Hz to 110 GHz and up to 11 GHz of analysis bandwidth.
    • Tests the true performance of a 5G new radio (NR) transmitter with an advanced error vector magnitude (EVM).
    • Finds out-of-band emissions or spurs quickly in radar designs with superior swept displayed average noise level (DANL).
    • Develops high-throughput satellite communication designs with 4 GHz of corrected analysis bandwidth.

    “With the increasing demand for data, higher frequency and bandwidth, Keysight’s signal analyzer and generator solutions embody our deep expertise in mmW design and measurements, for the latest 5G wireless, radar, aerospace defense, satellite and communications research,” said Joe Rickert, vice president and general manager of high frequency measurement R&D for Keysight’s communications solutions group. “We’re excited to partner with our customers on their test and measurement needs to accelerate industry innovations.”

    Test Application Software

    To ensure designs meet the latest standards with ready-to-use measurement applications for cellular communication, wireless connectivity, and aerospace/defense, the company integrated PathWave X-Series measurement applications with the UXA X-Series signal analyzer.  These applications simplify complex tasks and deliver repeatable results.  In addition, the 89600 PathWave Vector Signal Analysis software,  a comprehensive set of tools for demodulation and vector signal analysis, offers support for more than 75 signal standards and modulation types, and enables customers to explore every facet of a signal and optimize their most advanced designs.

    Cellular Communications

    Testing 5G components and devices per the 3GPP 5G New Radio (5G NR) standard Releases 15 and 16 requires a solution with higher accuracy, sensitivity, and bandwidth capability.

    The N9042B signal analyzer tests the true performance of transmitter designs with error vector magnitude (EVM) and 5G NR signal analysis software which perform transmitter downlink and uplink measurements with one-button simplicity.

    Satellite Communications

    Today’s satellite communication systems require a sophisticated approach to wideband component characterization. Customers need to characterize amplifiers and components at bandwidths wider than the target application. The N9042B UXA X-Series signal analyzer provides a wide analysis bandwidth and unbanded, preselected frequency range to help customers characterize the performance of their satellite designs.

    The N9042B UXA X-Series signal analyzer solution enables customers to reach high levels of measurement accuracy with:

    • The innovative Keysight V3050A Signal Analyzer Frequency Extender which delivers unmatched measurement accuracy of wideband signals at very high frequencies. It provides outstanding sensitivity, unbanded and preselected frequency coverage up to 110 GHz, high dynamic range and a seamless interface to the N9042B UXA signal analyzer.
    • Keysight’s RCal receiver calibrator corrects system path losses and frequency responses up to 5 GHz IF bandwidth without the need for an external vector network analyzer, cabling and manual test-plane characterization. The palm-sized RCal seamlessly transfers precision factory calibration data to the Keysight X-Series signal analyzer over a USB connection, reducing the effort and complexity required to improve measurement accuracy for the test receiver system.
    • Keysight’s companion VXG microwave signal generator offers high output power with ultra-low phase noise and wide bandwidth for demanding wireless, as well as aerospace and defense applications. The VXG’s dual-channel architecture, quickly switches from blocker and interferer tests to dual channel MIMO and beamforming tests.

    Additional information is available as follows:

    About Keysight Technologies

    Keysight delivers advanced design and validation solutions that help accelerate innovation to connect and secure the world. Keysight’s dedication to speed and precision extends to software-driven insights and analytics that bring tomorrow’s technology products to market faster across the development lifecycle, in design simulation, prototype validation, automated software testing, manufacturing analysis, and network performance optimization and visibility in enterprise, service provider and cloud environments.  Our customers span the worldwide communications and industrial ecosystems, aerospace and defense, automotive, energy, semiconductor and general electronics. Keysight generated revenues of $4.2B in fiscal year 2020. For more information about Keysight Technologies (NYSE: KEYS), visit us at www.keysight.com.

  • Vulcan Cyber Research Reveals Most Enterprise Cybersecurity Teams Lack the Ability to Remediate Risk

    Benchmark study finds most cybersecurity organizations lack the tooling and resources to deliver enterprise cyber hygiene

    TEL AVIV, Israel — May 12, 2021 — Vulcan Cyber®, developers of the industry’s only risk and vulnerability remediation platform, today released the results of its latest vulnerability remediation maturity research project. A survey of more than 100 enterprise security executives across North America and EMEA found that most enterprise cybersecurity and vulnerability management organizations lack the ability to drive remediation initiatives, to reduce risk and achieve acceptable levels of cyber hygiene. Vulcan Cyber is using the benchmark data from this research to provide cybersecurity leaders with a free vulnerability remediation maturity self-assessment service.

    Conducted by Pulse, the Vulcan Cyber vulnerability remediation maturity survey examines the maturity of enterprise vulnerability remediation programs while seeking to identify where shortcomings exist within respondents’ cyber hygiene efforts. According to the findings, 56% of organizations lack the ability to remediate vulnerabilities with speed and at the scale necessary to protect business from exploits and hackers. Immature cybersecurity teams typically react to vulnerabilities on a case-by-case basis. Additionally, nearly 80% of respondents do not have the proper tooling to proactively orchestrate and automate vulnerability remediation.

    “Enterprises must work to get ahead of the relentless barrage of known security vulnerabilities that increasingly threaten business. Development, IT operations and security teams should be able to coordinate and measure their efforts to remediate vulnerabilities quickly and at scale,” said Yaniv Bar-Dayan, Vulcan Cyber CEO and co-founder. “To be effective, it takes the right people, processes and tools. If anyone is lacking, it is close to impossible to drive meaningful remediation outcomes. It is no small task to get fix done so we are doing all we can to make vulnerability scanning and vulnerability prioritization freely available to all cybersecurity teams.”

    Key findings from the Vulcan Cyber study include:

    • Only 21% of enterprises have the proper tooling to proactively manage and automate vulnerability remediation. While only one-third (34%) of respondents reported having a defined, effective process for detecting and responding to vulnerabilities, one-third (33%) lack an effective or comprehensive process entirely.
    • Forty-four percent of survey respondents only rely on the criticality of a vulnerability and the available bandwidth of IT and security teams to determine how quickly to remediate a vulnerability—and less than one-quarter (21%) are proactively remediating as quickly as possible.
    • Nearly one-third (31%) of respondents admitted their organizations do not prioritize vulnerabilities at all. The most mature organizations use a combination of inputs from CVSS scores, threat intelligence, and risk to business assets to prioritize vulnerabilities, but this was only 26% of enterprises.
    • Forty-six percent of survey respondents either don’t measure vulnerability risk at all, or rely on “gut feel.”

    “As organizations become more mature in their vulnerability remediation efforts, it is possible to become substantially more efficient, while increasing the scale of cyber hygiene coverage,” said Bar-Dayan. “It requires all stakeholders – security, IT operations, engineering, and business unit owners – to align objectives and orchestrate tooling to create optimized and automated remediation workflows. We are working to change the economics of risk operations and vastly improve enterprise cyber hygiene.”

    Vulcan Cyber has made it easy for organizations to assess their vulnerability remediation maturity levels using its new security self-assessment tool. For additional guidance on how to benchmark current practices and outcomes against using the Vulcan Vulnerability Remediation Maturity Model, read the Vulcan Cyber eBook titled, The Four Levels of Mature Vulnerability Remediation.

    For more information about Vulcan Cyber, please visit https://vulcan.io/ to request a demo, or try Remedy Cloud today. In addition, Vulcan Free is now available as the industry’s only free vulnerability prioritization tool. Apply for Vulcan Free access today.

    About Vulcan Cyber

    Vulcan Cyber has developed the industry’s first risk and vulnerability remediation platform, built to help businesses reduce cyber risk through measurable cloud and application security. The Vulcan platform orchestrates and tracks the remediation lifecycle from scan to fix by prioritizing vulnerabilities, curating and delivering the best remedies, and automating processes and fixes through the last mile of remediation. Vulcan Cyber helps IT security teams collaborate and “get fix done” at scale. Vulcan Cyber is proud to offer Remedy Cloud and Vulcan Free as freemium SaaS solutions for businesses of all sizes. The unique capability of the Vulcan Cyber platform has garnered Vulcan Cyber recognition as a 2019 Gartner Cool Vendor and as a 2020 RSA Conference Innovation Sandbox finalist. https://vulcan.io

  • Salt Security Enhances Developer Insights on Industry’s Only Full Lifecycle API Security Platform

    Salt augments existing “shift left” features to provide more remediation insights earlier in the API lifecycle to help organizations better secure their API-driven applications 

    Palo Alto, CA – May 12, 2021 – Salt Security, the leading API security company, today announced that it has updated its next-generation Salt Security API Protection Platform with additional “shift left” security capabilities including API security posture insights and automated OpenAPI Specification (OAS) analysis and reporting. These latest capabilities enable Salt Security users to harden the full application lifecycle — build, deploy and runtime – identify risks and vulnerabilities in APIs before they are exploited, and make it easier to report on OAS standards to improve their API security posture.

    The new capabilities in the Salt platform enable companies to identify these vulnerabilities before they can be exploited. Because Salt provides both runtime protection and developer insights, companies can ensure their vital data and services are immediately protected against attacks while they work with developers to harden their APIs.

    “From a security standpoint, today’s application dependence on APIs changes the source of risk – it’s not just the front end under siege from traditional attacks and recon activities that map out backend processes,” said Mike Rothman, president of security analysis and consulting firm  Securosis. “APIs have quickly emerged as the most attractive and least protected target within today’s new applications, since they have access to critical data and services.”

    New features in the Salt Security API Protection Platform include:

    • Posture insights – enabling companies to identify risk and vulnerabilities in their APIs before they can be exploited. The Salt platform highlights actionable insights on exploitable vulnerabilities such as potential data leaks and security misconfigurations, before any actual attack has occurred. These insights help customers continuously improve their security posture and reduce their attack surface.
    • OAS accuracy – ensuring accurate documentation to enhance organizational efficiency and simplify compliance. The Salt platform provides a dynamic comparison between OAS documentation and the APIs and sensitive data the Salt platform discovers. On average, customer evaluations reveal 40% to 800% more APIs in use than companies have in their documentation and 10x to 20x the number of parameters.
    • Automated alerting and documentation – providing real-time feedback on non-compliant APIs and generating OAS documentation. Salt sends real-time alerts whenever the APIs and exposed parameters it discovers do not match OAS documentation. Organizations can export the full discovery of APIs and exposed data as updated and accurate OAS files, ensuring documentation is complete before APIs are published and simplifying compliance.

    The Salt platform has long used attacker behavior to identify security gaps in APIs – effectively using attackers as pen testers, with their small successes, before the Salt platform shuts down the attacker, highlighting areas where APIs can be improved. These new capabilities identify such security gaps well before they can be even partially exploited. Salt integrates with DevOps tools such as Jira and Slack to efficiently route remediation details to the right development team and can help track tickets to ensure remediation fixes are implemented. Salt taps the vulnerability learnings from its customer environments to enhance its ML and AI models, improving remediation insights for all its customers.

    According to the Salt Security State of API Security Report, Q1 2021, API security concerns are significantly inhibiting business innovation. Identifying vulnerabilities in APIs early in their lifecycle is crucial to protecting companies’ vital assets so they can focus on business operations instead of risk. Because APIs are unique to each business, every API vulnerability is a zero-day vulnerability.

    “The misconception persists that WAFs and API Gateways are sufficient for protecting APIs against vulnerabilities and attacks and that developer documentation provides all the information an organization needs about its APIs,” said Roey Eliyahu, co-founder and CEO, Salt Security. “But API attacks easily elude WAFs and gateways, which can protect against only known attacks, and today’s application environments are too complex and too dynamic for manual documentation to keep up. APIs are among the most vulnerable parts of the modern application stack. Salt Security’s latest capabilities make security more effective across the full application lifecycle — something no other company in the API security market provides  — identifying the zero-day vulnerabilities and protecting them from attacks in runtime.”

    For more information on the Salt Security API Protection Platform or to request a demo, please visit: https://content.salt.security/demo.html.

    About Salt Security

    Salt Security protects the APIs that form the core of every modern application. Its API Protection Platform is the industry’s first patented solution to prevent the next generation of API attacks, using machine learning and AI to automatically and continuously identify and protect APIs. Deployed in minutes, the Salt Security platform learns the granular behavior of a company’s APIs and requires no agents, no configuration, and no customization to pinpoint and block API attackers. Salt Security was founded in 2016 by alumni of the Israeli Defense Forces (IDF) and serial entrepreneur executives in the cybersecurity field and is based in Silicon Valley and Israel. For more information, please visit: https://salt.security

  • Moogsoft Enhances Observability Cloud Platform With New Features to Streamline Workflow and Increase User Productivity

    Leader in observability with AIOps releases new product features, adding simplicity and optimizing user experience

    SAN FRANCISCO, CA — May 12, 2021 — Moogsoft, the observability with AIOps leader, today announced the launch of new product features and several updates, including extending integration capabilities to easily and openly connect disparate tools and data into a single source through the unique “Create Your Own Integration” and hybrid-cloud experiences; driving incident workflow automation to reduce toil using workflow auto close automation, tag aggregation and context, and automatic event enrichment; and making configuration and the lives of users even easier with secure credential store, data configuration overview and personalization.

    The announcement of Moogsoft’s new product updates follows the release of the 2021 Gartner Market Guide for AIOps Platforms, which stated, “AIOps platforms enhance a broad range of IT practices, including I&O, DevOps, SRE and service management. … There is no future of IT operations that does not include AIOps. This is due to the rapid growth in data volumes and pace of change … that cannot wait on humans to derive insights.”

    As the industry evolves, Moogsoft continues to release significant product updates, pushing innovation to newfound levels in order to simplify the distillation of metric and event data into meaningful insights.

    The new product features allow Moogsoft users to optimize productivity and focus time back on innovation. The features and updates include the following:

    Extending integration capabilities to easily and openly connect disparate tools and data

    • “Create Your Own Integration” updates and enhancements: “Create Your Own Integration” is an industry first. It’s the easiest and most transparent integration approach to connect all your disparate observability and monitoring tools. It allows users to generate a custom API endpoint to which they can send any raw event and/or metric data. Users are able to view the received payloads and easily map the data they choose to Moogsoft fields. Moogsoft then automatically normalizes and correlates the events into incidents users can action. With the latest update, users have the capability to integrate payloads that include multiple events within. This saves an immense amount of time, resources and money with complete transparency to get connected and operating quickly.

    • Microsoft Azure App Insights integration (beta): Azure App Insights is a cloud-to-cloud integration that provides an administrator with the ability to ingest metric data that is configured in Microsoft Azure. The metric data will then be analyzed to establish the normal operating behavior with an upper and lower threshold. If the metric deviates from the normal behavior, an anomaly event will occur. This allows users to understand the difference between a normal behavior and a potential issue that they need to address and eliminates the need for administrators to manually create a threshold for each metric. By understanding an application’s normal behavior and acting on the context Moogsoft provides, users are able to resolve issues quickly and learn from them to build more resiliency, improving stability and ultimately their customer experience.

    Drive incident workflow automation to reduce TOIL

    • Automatic event enrichment with Auto Classify (beta): Traditionally, it takes a number of rules and queries to classify alerts into known infrastructure elements and the associated types of failures (e.g. Network | Availability), which is how all enrichment features work for an event management product. Until now. Moogsoft Classification uses ML to analyze your data and automatically determine the infrastructure element and type of failure so you don’t have to. This frees up time to focus on the more important tasks, like increasing reliability, innovating or perhaps getting a little more sleep.

    • Extended workflow automation with Auto Close: Auto Close is a configurable setting that extends workflow automation to automatically close any alerts or incidents when they meet the time and criteria the user sets. When the user fixes that nagging issue and the clear event comes through, or the metric falls back into the normal behavior, the alert severity will automatically move to “clear”’ and the status to “resolved.” Once all alerts are resolved and the time has reached the user’s configured time, the alerts and incidents will automatically close. This saves yet one more step so users can get back to an innovative vibe and improve products and services.

    • Automated incident context with Tags: With Moogsoft, the context needed to stay well within SLA and SLOs is right in front of you. Incidents will automatically aggregate and deduplicate all the tags from alerts, including any custom tags created along the way. This provides users with the fastest path to remediation through automated incident context so they can lower mean-time-to-resolve and remain within SLA and SLOs.

    Making configuration and users lives even easier

    • Navigation updates: The Moogsoft navigation is incredibly slick and easy to use, allowing users to hover, or expand, for as long as they’d like. Each area has been carefully designed to get users where they need to be in a single click while also providing some insights into the flow of data through the product and how things are connected. Easy and smooth navigation saves precious seconds and helps SRE teams understand even more so they don’t have to waste clicks and time trying to find what they need. After all, they want to resolve the issue and get back to doing what matters most.

    • Data flow and configuration overview: To get the full value out of observability and AIOps products, users need to understand not only the concepts but how data flows and the product can be configured. That’s why the very first page when a user logs in shows exactly how data flows through the product and all the different items that can be configured. Users are able to get up and running in no time flat so they can spend more time developing and less time figuring out how to operate everything.

    • Secure Credential Store: Moogsoft saves time when configuring any integration or when a new monitoring source is discovered by safely and securely storing the credentials that are already entered. Users can reuse these for specific integrations or all integrations. It’s their choice. But the bottom line is Moogsoft saves the trouble of needing to remember and enter credentials every time. This allows monitoring discovery to run and find new sources to monitor so users never miss an event and get caught off-guard. Users are able to focus on improving and automating more instead of constantly configuring and trying to understand what needs to be monitored.

    • API Keys & Role Based Access Control: As an administrator, you can see everyone’s level of access, including who has access to the APIs via API keys that are directly associated with a user’s ID. If a user is suspended or deleted, the API key is automatically deleted as well. Administrators can also elevate user privileges to share admin activities. This saves precious time and ensures that teams are staying within access compliance automatically.

    • Personalization and interactions: New personalization capabilities allow users to change the order of columns, which columns are displayed and even the refresh rate of their UI to display new information at a preferred rate. This will allow users to take better advantage of different interactions, like the “Assign to Me” shortcut, and view the most relevant information so they can make faster decisions to fix issues quickly and efficiently. Companies depend on SRE teams day-in and day-out, and every second counts. Personalized UI will help to keep organizations running smoothly.

    “In a period of immense growth, our team is working harder than ever to allow development, ITOps and SRE teams to work more efficiently,” said Adam Frank, Moogsoft Vice President, Product Management and UX Design. “Simplicity within the user experience continues to be at the forefront of everything we release – from new and improved navigation to the ease-of-use of our industry-leading open and transparent integrations – making it even easier for our customers to take advantage of observability with AIOps and allowing them to develop more and operate less.”

    The launch of Moogsoft’s new features follows the announcement of significant company milestones, including 100% QoQ growth that has further fueled record expansion and 105% net dollar retention rate, alongside the company now being fully funded.

    For more information about Moogsoft and its latest feature updates, please visit www.moogsoft.com.

    About Moogsoft

    Moogsoft is the observability with AIOps leader that delivers the most advanced platform for software engineers, developers and operators to instantly see all incidents and potential issues, know what’s wrong and fix things faster. Founded in 2012, Moogsoft has more than 140 customers worldwide including American Airlines, Fannie Mae, Fiserv, HCL Technologies, SAP SuccessFactors, and Verizon Media. It has established strategic partnerships with leading managed service providers and outsourcing organizations including AWS, Cisco, HCL Technologies, TCS and Wipro.

    Moogsoft® and the Moogsoft logo are proprietary trademarks of Moogsoft Inc. All other products or names may be trademarks of their respective companies. For more information about the Moogsoft Observability Cloud and its customers’ success, visit Moogsoft.com.