Demisto, an
innovator in Security Automation and
Orchestration technology, today launched the latest release of its Security
Operations Platform, enabling customers to best leverage the incident metrics
in Demisto through customizable dashboards and reports, enhance modularity and
reusability of playbooks to accelerate workflow development, and improve
machine learning suggestions to build leaner response processes.
Organizations can now accurately measure metrics around
incident response and leverage Demisto's rich underlying data through powerful
customizable dashboards and reports. CISOs can measure SOC health and business
risk, SOC managers can measure analyst productivity and incident bottlenecks,
and analysts can measure incident and indicator trends. Access to an easily
configurable widget library and the ability to spin up custom incident and
indicator widgets results in custom persona-based dashboards to drive
actionable metrics.
The new customizable dashboards and reports enable users to
better sort, access and understand the collected data to measure metrics about
analyst workload, incident trends and security effectiveness across their
security product suite.
"Security Orchestration, Automation and Response (SOAR)
tools are expected to generate reports and dashboards for at least three
classes of persona: analyst, SOC director and chief information security
officer (CISO)," wrote Claudio Neiva et al of Gartner. "Because SOAR tools
orchestrate incident response, have bidirectional communication with many other
tools in the organization, and empower analysts, they are generating and
accessing a lot of very valuable metrics that can be used for several types of
reporting."
Demisto's new product release has also improved machine
learning capabilities, enabling all analysts to perform at a higher level of
expertise. The platform now provides argument suggestions for automations used
in playbook tasks, allowing users to maximize productivity in real-time and
hone in on the most effective resolution procedures. This facilitates creation
of best-in-class response workflows that are primed for continuous improvement.
"Demisto's new
release comes packed with new features suggested by our community of customers
and partners," said Dan Sarel, co-founder and VP Products of Demisto.
"Demisto's automation suite is easy to learn but has endless potential use
cases, allowing analysts to codify and automate complex enrichment and response
processes across the entire security product stack. The increased flexibility,
reusability, and portability of Demisto's playbooks can help combat the security
industry skills shortage and help analysts perform key tasks better."
Demisto Enterprise
integrates with more than 160 security products and enables organizations to
build playbooks for different security operations. By integrating other
security products with Demisto, users can orchestrate actions across a suite of
products in one window, automate response actions through playbooks, and run
live security commands from a collaboration interface to remediate threats. All
of which can reduce mean time to response (MTTR) for security incidents. In
addition, the case management and machine learning capabilities help security
teams save resources and time while enforcing rigor and process to incident
response. Demisto helps future-proof security operation centers.
Availability and Pricing
Demisto's new release is available today. Visit www.demisto.com to download a free version.