AttackIQ announced the launch of its Preactive Security Exchange (PSE),
an objective and trusted platform on which security vendors can
demonstrate the value and efficacy of their products, as well as
identify opportunities to improve solutions. BlackBerry, Cisco, Illumio,
LogRhythm, Microsoft,
RSA, and SentinelOne are among the dozens of inaugural vendor partners
of the PSE, working together to improve the effectiveness of the
security tools available on the market today.
"With
the launch of the PSE, AttackIQ has set forth a mission of fixing
enterprise security through honest, open collaboration with any security
controls vendors willing to work with us to better understand how to
test their products, for the benefit of our mutual customers," says
Dariush Afshar, VP Platform, AttackIQ. "This initiative will enhance our
ability to accurately measure the effectiveness of security controls
within the customer environment and help vendors tune their products to
better deliver on promises, and in turn, better protect their
enterprise. We're pleased to see such a positive response from the
vendor community, with so many controls integrated at launch - and
growing quickly."
Based
on conversations with countless enterprise customers over the years,
the PSE was created to mitigate fatigue and frustration when navigating
the increasingly confusing and crowded security controls industry
landscape. The Ponemon Institute 2019 Research Report found
enterprise customers spend on average $18.4 million annually on
cybersecurity and deploy 47 different security products. Yet 53%
admitted they do not know how well the cybersecurity tools they have
deployed are working. Additionally, the Verizon Data Breach Investigations Report found
that 82% of successful breaches should have been stopped by existing
security controls. Organizations must be certain their security measures
can effectively prevent critical infrastructure disruption. AttackIQ
operationalizes the MITRE ATT&CK database of known attacker tactics,
techniques and procedures (TTPs) and helps customers assess the ability
of their security stack to prevent, detect and contain real-world
threats.
"At AttackIQ, we believe deeply in industry collaboration as evidenced by our work with the MITRE Center for Threat-Informed Defense.
Now, with the Preactive Security Exchange, we have created another way
for the security industry to collaborate for the benefit of our mutual
customers' success," says Brett Galloway, CEO of AttackIQ. "We are
incredibly grateful for the recognition of our value received from the
inaugural group of PSE members, and look forward to deepening our
engagement with each of them as we elevate the security posture of our
customers together."
To
coincide with PSE and offer their partners effortless integration,
AttackIQ is releasing a set of REST APIs. As an API-first company,
AttackIQ is committed to respecting customers' existing investments and
helping them gain unprecedented visibility into their own technology
stack. The PSE's cross-category approach reflects the broad set of
investments customers make to secure their enterprises. In fact, the PSE
has already developed collaborative relationships involving custom
health check assessments with controls vendors in the following
categories: Endpoint Detection Response (EDR), Firewall, Secure Web
Gateway, SOAR, CASB, Vulnerability Management, Logging and Analytics,
Network Detection and Response (NDR), Network Virtualization, IDS/IPS,
ITSM, Cloud Service Providers, SIEMs, Operational Technology (OT),
Industrial Control Systems (ICS), and others.
To learn more about AttackIQ's Preactive Security Exchange, please visit https://www.attackiq.com/pse.