Virtualization Technology News and Information
Demisto Leverages Amazon Web Services for Real-Time Automated Incident Response and Proven Cloud Security

Demisto, Inc., one of the leaders in Security Orchestration, Automation and Response (SOAR) technology, announces an integration with Amazon Web Services (AWS) Security Hub, allowing users to centralize visibility and automate response actions across AWS.

As an AWS Partner Network (APN) Launch Partner for AWS Security Hub, Demisto continues to build on its existing relationship with AWS as well as leverage services including Amazon GuardDuty, AWS CloudTrail, Amazon Route 53, Amazon Simple Queue Service (Amazon SQS), Amazon Elastic Compute Cloud (Amazon EC2), and others to provide customers with a single console for coordinating security and IT actions.

With AWS Security Hub, Demisto customers can benefit from deep security insights from AWS products and services as well as other APN Partners before coordinating response and operational actions across their cloud and on-premises environments, further enhancing their security posture.

"Increased cloud adoption has introduced new security challenges, highlighted by limited visibility over an expanded threat surface," said Dan Plastina, Vice President, Security Services, Amazon Web Services, Inc. "As an APN Launch Partner for AWS Security Hub, Demisto helps customers by unifying intelligence across disparate environments and enabling the execution of standardized workflows to respond at scale."

AWS Security Hub is designed to provide users with a comprehensive view of their high-priority security alerts and compliance status by aggregating, organizing, and prioritizing alerts, or findings, from multiple AWS services, such as Amazon GuardDuty, Amazon Inspector, and Amazon Macie as well as from APN security solutions from APN Partners. The findings are then visually summarized on integrated dashboards with actionable graphs and tables.

"In order to manage a growing number of security alerts, we provide users with the ability to prioritize security data and shorten response times to the most critical threats," said Rishi Bhargava, Co-founder and Vice President of Marketing, Demisto. "Being an APN Launch Partner for AWS Security Hub is an important step towards bridging the disconnect between cloud and on-premises environments that incident responders face while dealing with alerts. This integration builds atop our existing AWS capabilities to provide security and IT teams with the right information in the right place, setting them up to make important decisions without getting lost in data collection and validation. Being an APN Launch Partner for AWS Security Hub underscores our commitment to working with AWS."

Demisto has listed its Enterprise Amazon Machine Image (AMI) on AWS Marketplace. Demisto Enterprise integrates with hundreds of security products and allows organizations to build playbooks for different security operations. Demisto's solution has helped Security Operations Center (SOC) teams reduce the number of alerts requiring human review by as much as 95 percent. It also solves the ever-growing problem of product fatigue - where analysts need to learn more products to mitigate threats throughout their infrastructure. As a platform designed to integrate with all major security products such as Security Information and Event Management (SIEM), network security, threat hunting, and endpoint tools, Demisto Enterprise provides analysts a comprehensive view into incident response. For more information, visit

Published Thursday, November 29, 2018 8:39 AM by David Marshall
Filed under: ,
There are no comments for this post.
To post a comment, you must be a registered user. Registration is free and easy! Sign up now!
<November 2018>