Alert Logic Extends Attack Surface Coverage for Endpoint, Multi-Cloud, and Dark Web
Organizations Gain Broader Detection and Response for Less Effort and Lower Cost, with No SIEM Required
SAN FRANCISCO, March 5, 2019 /PRNewswire/ -- Alert Logic, the SIEMless Threat Management™ company, announced at the RSA Conference that it has added a new extended endpoint protection capability along with other new capabilities for anti-virus integration, log collection and search for Office 365, Microsoft Azure Event Hubs integration, user behavior anomaly detection for Amazon Web Services (AWS) environments, and dark web scanning. This expanded attack surface coverage enriches Alert Logic's offering with even greater detection and protection support along with enhanced visibility across environments and workloads, thereby addressing more of the needs of resource-constrained security buyers without requiring a Security Information and Event Management (SIEM) tool.
"Alert Logic is rapidly innovating to detect security events across more of the attack surface to protect workloads on any environment—in the cloud, on-premises, or hybrid," said Onkar Birk, Senior Vice President of Product Strategy & Engineering. "Because our offering seamlessly connects security platform, threat intelligence and expert defenders, our customers get better security coverage that maps to their risks and ensures optimal coverage even with constrained budgets."
Extended Endpoint Protection
According to Forrester1, "It's often more difficult for firms to find and hire people with the right skills to manage endpoint security tools than it is to procure a managed service provider to accomplish the same task."
The new extended endpoint protection capability leverages machine-learning and behavioral analytics to monitor and isolate Windows and Mac client endpoint attacks at the earliest opportunity, including so-called 'zero day' threats. It helps thwart multiple attack techniques that try to compromise endpoints, gain access to resources, and detonate payloads, and provides deep visibility in real-time across endpoints, including low-level system activity, without impacting performance. Customers can use Alert Logic alongside of existing anti-virus detection and endpoint security tools to provide an additional layer of defense. Extended endpoint protection is available in beta for select customers and partners today and will be generally available in Alert Logic Essentials in calendar Q2.
"As employees become more mobile, organizations struggle to manage and deliver endpoint protection that is dynamic and cost effective without causing disruption," said Jack Danahy, Senior Vice President, Security, Alert Logic. "With these new capabilities, we ease the security and management burden for our customers."
In addition to extended endpoint protection, Alert Logic is introducing additional capabilities to broaden its attack surface coverage, including the following:
- Anti-virus Integration: Enables ingestion and analysis of anti-virus data to provide key insights for alerting and Security Operations Center (SOC) support, such as detection of known hacking tools and writing to privileged locations. Available today in Alert Logic Professional.
- Office 365 and Expanded Azure Integration: Provides Office 365 log collection and search for Exchange, SharePoint, Teams, and more and Azure Event Hubs integration for Azure Active Directory, Azure Diagnostics, Azure Activity Log, Azure Security Center, Azure SQL Audit logs and more, further extending how Alert Logic supports organizations across any environment. Available today in Alert Logic Professional.
- AWS User Behavior Anomaly Detection: Leverages AWS CloudTrail to detect and alert on suspicious user activity in AWS environments. Uses machine learning to help determine a baseline of user behavior and identify changes in the way users access systems including locations and times of access. Available today in Alert Logic Professional.
- Dark Web Scanning: Enables Alert Logic SOC analysts to scan customer account domains to identify and send alerts when compromised credentials are found on the dark web. Helps reveal potential risks of attack due to hacked email accounts, spear phishing and other targeted social engineering efforts. Available today with the Assigned SOC Analyst option for Alert Logic Enterprise.
"We rely on Alert Logic for cybersecurity and are excited by these new capabilities that will provide greater coverage of our attack surface," said Rob Hayes, Business Development Director, eComchain. "Threats happen around the clock. Staffing a 24/7 SOC and implementing and maintaining a SIEM is a time-consuming and expensive approach that we did not want to follow. Alert Logic's SIEMless offering is a better approach that helps us understand where we have risk, monitors and alerts us when there are threats, and provides us with the right level of security at a cost that makes sense for our business."
"Alert Logic continues to innovate in ways that help our clients secure existing environments while protecting new ones as their businesses evolve," said Paul Kunze, Vice President, Sales and Marketing, IntraSystems. "We are eager to provide clients with these new capabilities around endpoint, dark web, and multi-cloud support all delivered via the Alert Logic SIEMless model of security platform, intelligence and experts."
These new capabilities are offered at no additional cost to customers of Alert Logic Essentials, Professional, and Enterprise, respectively.
For more information, please visit Alert Logic's product overview and pricing page and RSA Conference Booth #1627 in the South Expo Hall.
Additional Resources
Blog
@AlertLogic on Twitter
LinkedIn
About Alert Logic
Alert Logic seamlessly connects an award-winning security platform, cutting-edge threat intelligence, and expert defenders – to provide the best security and peace of mind for businesses 24/7, regardless of their size or technology environment. More than 4,000 organizations rely on Alert Logic SIEMless Threat Management to ensure the right level of security and compliance coverage at a lower total cost than point solutions, SIEM tools, or traditional security outsourcing vendors. Founded in 2002, Alert Logic is headquartered in Houston, Texas, with offices in Austin, Seattle, Dallas, Cardiff, Belfast, London and Cali, Colombia. For more information, visit www.alertlogic.com.
For Alert Logic Inquiries:
Christine Blake
Public Relations
W2 Communications
703-877-8114
Christine@w2comm.com
1 Forrester, "The State of Endpoint Security, 2019," January 22, 2019
Logo - https://mma.prnewswire.com/media/73963/alert_logic_logo.jpg
Share this article