Effective vulnerability management programs reduce the risks of cyber attacks
and provide a consistent measurement of risk across the organization. This is only made possible through an end-to-end approach that supports continuous vulnerability monitoring, risk-based analysis and timely remediation. However, most vulnerability assessments drown IT security teams in data, and produce long reports with no prioritization or actionable fxes. Active scanners can be disruptive so they are used less frequently than needed. Organizations have a tough trade-off between the management headaches of vulnerability scanning and analysis, versus the risk of potential exposure to cyber attacks inficted by APTs and malware.
Solution Overview Skybox raises the bar with a next-generation, end-to-end vulnerability management solution that automates and integrates continuous vulnerability discovery, analysis and remediation, enabling same-day attention to critical cyber risks. The Skybox vulnerability management solution is based on Skybox Risk Control, which combines scanless vulnerability discovery with automated risk analytics to prioritize vulnerabilities and supply remediation options immediately, specifc to each organizations infrastructure. Additionally, the Skybox vulnerability management solution is the only solution able to fnd vulnerabilities across a large network infrastructure at least 50 times faster than traditional active scanning technologies, delivering continuous vulnerability management and intelligence with near-zero false positives. VULNERABILITY MANAGEMENT Enterprises and government agencies using the Skybox vulnerability management solution report breakthrough results: Nearly 100% reporting accuracy every day, with no disruption False positive reduction to near zero levels Detection of 100,000 real vulnerabilities within hours of deployment Effective reduction of risk for the frst time Metrics and dashboards that provide information needed to justify additional security resources Skybox
Vulnerability Management Solution
Integrated Vulnerability Discovery, Analysis and Remediation Enables Same-Day Attention to Critical Cyber Risks We no longer have to deal with false positives. We have been using the Skybox vulnerability management solution for more than a year, and our false posi- tives have been signifcantly reduced from the 20 percent we were experiencing. Additionally, this allows us to prioritize our efforts in deploying patches. - Alejandro Villar, CISO Repsol, a Spanish oil and gas company HIGHLIGHT FEATURES Firewall Assurance Network Assurance Risk Control 4 Non-disruptive Discover vulnerabilities across the entire network without touching every node 4 Fresh data Data is continuously updated, with no round-robin compromise needed 4 Automate vulnerability management tasks Deliver a 50x improve- ment in vulnerability management discovery 4 Near-zero false positives Innovative analytical technique delivers accurate vulnerability intelligence 4 99% data reduction Context-aware risk ranking ends overload of irrelevant data 4 Eliminate attack vectors Continuous vulnerability management cycle supports same-day remediation of critical risks Copyright 2013 Skybox Security, Inc. All rights reserved. Skybox is a trademarks of Skybox Security, Inc. All other registered or unregistered trademarks are the sole property of their respective owners. DS_VM_SB_081213 Key Features Experience best-in-class vulnerability management with powerful, integrated functionality: Non-Disruptive, Scanless Vulnerability Discovery Skybox eliminates the challenges associated with active scanning (long cycles, disruption and inaccuracy) with Vulnerability Detector, a non-disruptive, scanless discovery technique. Vulnerability Detector analyzes common product information repositories to automatically and accurately deduce vulnerability data. Scanless discovery benefts: Continuous discovery cycle time Analyzes 12,000 hosts per hour Non-disruptive Deduces vulnerabilities from the information repositories rather than touching every node Comprehensive coverage Detects vulnerabilities on critical systems and network devices, such as frewalls and routers and other non-scannable devices Automated Analytics Prioritize Vulnerabilities and Speed Remediation Skybox uses automated security metrics to prioritize vulnerabilities by severity, vendor or business asset groups. This allows network teams to continuously analyze, track and report progress towards risk level reduction. Additionally, Skybox Risk Control provides actionable remediation stepsa recipe for remediation and an integrated workfow to generate support tickets and optimize patching activities. Risk-based prioritization benefts: Focus time and resources Automated vulnerability analysis eliminates lengthy cycles required to manually analyze long vulnerability reports Optimize patching activities Save patch management time, improve patch scheduling, and avoid unnecessary patching Track and measure remediation progress Provides executive-level visibility into the organizations risk trends Contextual Analysis to Prevent Attacks The Skybox vulnerability management solution also provides context-aware attack simulation to quickly fnd and quantify risk exposure and the likelihood of attack based on network architecture and other factors. With context-aware analysis, remediation teams gain visibility into the critical short-list of vulnerabilities requiring immediate action. Skybox Risk Control offers remediation suggestions and considers a variety of actions, such as IPS signatures activation, frewall confguration changes, patching, system confguration and more. Context-aware remediation benefts: Fast response to critical exposure Enabling immediate response to new exploitable threats to prevent attack Eliminate 99% of vulnerability data Context aware analysis ends overload of irrelevant data Additional Resources For more information about Skybox vulnerability management solution, visit www.skyboxsecurity.com/solutions/vulnerability- management or contact your local Skybox representative at www.skyboxsecurity.com/contactus. Skyboxs proactive security risk management solutions provide auto- mated, non-intrusive tools that detect, prioritize, and drive remediation of critical risks such as exposed vulner- abilities and frewall confguration errors before exploitation, preventing data breaches and cyber attacks. www.skyboxsecurity.com | +1 408 441 8060 | www.skyboxsecurity.com/contactus