DFLabs Introduces First SOAR Platform Optimized for Both Managed Security Service and Managed Detection/Response Providers
One-to-Many Operational and Management Capabilities Unify Security
Orchestration and Automation for Scalability Across Large Customer Bases
SAN FRANCISCO–(BUSINESS WIRE)–lt;a href=”https://twitter.com/hashtag/MDR?src=hash” target=”_blank”gt;#MDRlt;/agt;–RSA CONFERENCE — DFLabs, the
award-winning Security Orchestration, Automation and Response (SOAR)
vendor, today announced a new version of its DFLabs IncMan SOAR platform
tailored for the needs of Managed Security Service Providers (MSSPs) and
Managed Detection and Response (MDR) service providers. IncMan SOAR now
enables MDR providers and MSSPs to centrally perform one-to-many
operations across multiple customer environments regardless of the
security products deployed at each location, while providing flexible
deployment options for regulatory compliance and granular analytics for
reporting.
DFLabs is demonstrating the MSSP-centric version of IncMan SOAR this
week at RSA Conference 2019 Booth #3104 located in the South Hall.
According to MarketsandMarkets,
the global Managed Security Services market size was USD 20.81 Billion
in 2017 and is expected to reach USD 47.65 Billion by 2023, growing at a
Compound Annual Growth Rate (CAGR) of 14.7% during the forecast period.
“Managed Security Service Providers face many of the same challenges as
an internal security operations center only on a much larger scale,
especially those who offer managed detection and response,” said Michele
Zambelli, CTO of DFLabs. “This new version of IncMan SOAR enables MSSPs
and MDRs to work seamlessly across multiple customer instances, take one
to many actions when needed, maintain data segregation and granular
access controls, and provide per-customer analytics and reporting.”
Vendor Agnostic Runbooks
One of the leading challenges faced
by MSSPs is the increasing number of third party security products they
must support in customer environments. For example, an action as simple
as querying a firewall may involve interacting with a dozen different
technologies. IncMan SOAR now provides a vendor agnostic Runbook
capability which enables MSSPs to execute a single action across any
number of client technologies such as blocking a malicious IP address,
while providing each customer the ability to maintain control over what
actions are allowed.
Customer-Specific Privacy Controls
While information sharing
between MSSPs and their customers is a vital tool in detecting and
responding to security incidents, legal and regulatory mandates often
require MSSPs to support data storage and communication options that
comply with privacy and confidentiality directives. IncMan SOAR enables
MSSPs to put customers in control of their data, allowing them to
determine which intelligence, Playbooks, Runbooks and other information
can be shared with the service provider and its other customers.
Granular Reporting and Analytics
Performance data and
analytics are also critical assets for MSSPs, for both improving service
levels and demonstrating value to customers. IncMan SOAR automates the
collection and reporting of metrics and key performance indicators (KPI)
across one or more environments, providing deep visibility into all
facets of each customer’s security infrastructure and security posture,
as well as MSSP actions and their outcomes.
Availability
The new version of DFLabs IncMan SOAR will be
available from DFLabs and its business partners worldwide in Q2.
About DFLabs IncMan SOAR
DFLabs is the most open SOAR
solution in the market, which provides a framework for customizing and
adding new automated integrations between security tools and IncMan
SOAR, without the need for complex coding. With its unique capability of
full security incident lifecycle automation, DFLabs patent pending R3
Rapid Response Runbooks use hundreds of automated actions to provide
workflows and execute a variety of data enrichment, notification,
containment and custom actions based on complex, stateful and logical
decision making. This accelerates the ability of responders to assess,
investigate and hunt for threats. Runbooks also collect and facilitate
knowledge transfer between incident response (IR) and SOC teams.
About DFLabs
DFLabs is an award-winning and recognized
global leader in security orchestration, automation and response (SOAR)
technology. The company’s management team has helped shape the cyber
security industry, which includes co-editing several industry standards
such as ISO 27043 and ISO 30121. Its flagship product, IncMan SOAR, has
been adopted by Fortune 500 and Global 2000 organizations worldwide.
DFLabs has operations in Europe, North America, and EMEA. For more
information, visit www.dflabs.com
or connect with us on Twitter @DFLabs.
Contacts
Marc Gendron
Marc Gendron PR for DFLabs
781-237-0341
[email protected]