CIO Bulletin

Take Control of the External Attack Surface with Cyberpion

As organizations modernize, the vendor ecosystem on which they rely grows larger and more complex. The vendor ecosystem, which Gartner refers to as the "external attack surface," includes any external application or storage that is utilized by your organization, as well as any vendors of your direct vendor.

As career security professionals ourselves, we know security teams need the kind of visibility and prioritization that goes well beyond the typical scorecard. Cyberpion's Ecosystem Security Platform iterates through every connection, link, code embed, DNS reference, etc. to build a complete risk assessment for your PKI, TLS, Cloud, DNS, and web connections.

To reduce false positives and help you prioritize critical tasks, Cyberpion's findings are ranked by severity using a multi-layered scoring system and presented as actionable data in a web-based dashboard. Your team has a complete view of all your internet-accessible assets, the specific connections each asset has to external resources, and any vendor dependencies.

Founded in 2016, Cyberpion is today trusted by Fortune 500 organizations across a variety of industries including banking and financial services, insurance, healthcare, manufacturing and logistics, energy and utilities, retail and consumer goods, and media and telecom.

Traditional approaches to solving this growing security issue have fallen short and the solution required a new perspective. The concept of External Attack Surface Management (EASM) and Ecosystem Security (which extends EASM to include the digital supply chain) uncovers a vast new scope of cyber risks and vulnerabilities – risks that Cyberpion is uniquely positioned to detect.

"We know that this is a big problem to solve. When we saw the volume and scale of attacks against external infrastructures, with little to no awareness by the targeted organizations – governments, enterprises and SMBs, we knew we could do something about it," said Dr. Nethanel Gelernter, CEO.

Secure Your External Attack Surface

As digital transformation initiatives drive the growth of a business' online presence, organization becomes connected to more and more external resources and assets. Inevitably, the business becomes deeply connected and reliant on the IT infrastructures of third-party vendors, who in turn are connected to their own vendors and their IT, which are connected even further.

Cyberpion’s Ecosystem Security platform provides visibility into this interconnected online ecosystem — extending far beyond just a business' vendors. By traversing these connected cyber assets to the “Nth” degree and performing a security assessment on each of them, Cyberpion delivers the security intelligence a team needs to secure its organization. Armed with this information, a team can preemptively mitigate vulnerabilities before they are exploited.

Cyberpion’s discovery engine uncovers the external-facing third-party assets you’re connected to. By leveraging the same internet-scale bot technologies used by threat actors, the Ecosystem Security Platform iterates through every connection, link, code embed, DNS reference, and others to build a complete outside-in view of your organization’s extensive online ecosystem.

Cyberpion’s vulnerability assessment engine determines the risk level of each and every discovered asset. By leveraging its unique multi-layered assessment capabilities, Cyberpion creates a comparative and reliable threat score for each vulnerability. This capability significantly reduces false-positive alerts and provides greater clarity on which vulnerabilities are the greatest threat to an organization.

The company's platform provides clear action steps for security and IT teams to remediate vulnerabilities that require more complex steps. Additionally, Cyberpion uses this information to trigger the Active Protection capability whenever possible, which takes pre-emptive control of a vulnerable asset temporarily until a team is able to apply a permanent fix.

Gain Visibility into the Security Gaps

As a business' online ecosystem continues to expand, connections and assets create an increasing number of vulnerabilities. A security team needs to take control of these gaps before hackers exploit them, breach an organization, and harm the users.

But identifying vulnerabilities isn’t the only challenge. A team also needs to prioritize and mitigate the most severe issues first. Cyberpion’s Ecosystem Security platform provides continuous threat and vulnerability awareness of an entire digital ecosystem. Proactive insights from Cyberpion give security teams the ability to eliminate these attack vectors pre-emptively and prevent future breaches. Additionally, the platform prioritizes the most critical vulnerabilities first so teams know exactly where to start.

Secure Customers Trust

Maintaining customer trust and confidence is a critical responsibility for an organization. However, threat actors are continuously seeking out vulnerabilities in branded digital assets to leverage them, and the trust a business has built, in an attack against your customers and employees.

Cyberpion’s Ecosystem Security platform helps protect a brand with active monitoring of branded assets that threat actors seek to takeover and leverage in attacks against a business' customers. Cyberpion’s vulnerability intelligence makes it easy to find and mitigate vulnerable domains, login forms, and code assets that can lead to brand impersonations to dupe unsuspecting customers.

About the CEO

Dr. Nethanel Gelernter is an experienced security researcher with deep background from academia, industry, and the underground. Nethanel’s research field is practical cyber security, with a focus on modern attack vectors. Nethanel’s work has impacted the most popular online services and triggered design changes in the some of the most popular web applications.