CyberSponse

CyberSponse — developer of technologies for information security of the companies. It develops the CyOPs platform which allows to output notifications from several cybersecurity tools and to organize the relevant information on a uniform panel that IT administrators had not to switch constantly between applications by search of cyberthreats. Duplicative notifications are filtered automatically. The solution belongs to the class of SOAR technologies (Security Orchestration, Automationand Response).

History

2020: Completion of the transaction on CyberSponse acquisition by Fortinet company

Fortinet announced completion of the transaction on acquisition of CyberSponse company (Arlington, piece Virginia) – the developer of a software platform for the protected orchestration of management and process automation of response to incidents (Security Orchestration, Automation and Response, SOAR). It became known on January 22, 2020. Earlier CyberSponse was already a partner of Fortinet and participated in development of Fortinet Security Fabric. This step will allow to expand possibilities of process automation and response to incidents of such solutions as, for example, FortiAnalyzer, FortiSIEM and FortiGate that will lead to further simplification of operation of security systems.

Continuous growth of number of the used tools of security unrolled at the enterprise led to complication of their operation. It does the companies more vulnerable in case of violations. Thanks to integration of Fortinet Security Fabric into the powerful SOAR platform of CyberSponse company, customers will be able to reduce time of response to incidents and also will have an opportunity to standardize the applied processes, will be able to scale them, increasing the level of own security and reducing risks for business and the accompanying expenses, told Ken Xie, the founder and the CEO of Fortinet company

The modern landscape of cyberthreats and the applied response measures constantly evolves. The number of target programs for security grows that leads to increase of intensity of the received warnings and causes obtusion of vigilance, complicating already difficult conditions on operation of such systems. Difficulties are aggravated with a lack of necessary skills at cyberspecialists. The solution of these problems of the company and service providers see in simplification of operation and management systems and increase in efficiency of present command centers incidents (Security Operation Center, SOC). Such result is achieved due to consolidation of collecting and sorting of the notifications received from a broad spectrum of the applied security products by automation of the analysis and execution of the repeating transactions for economy of the spent resources, thanks to preparation it is good - the fulfilled scenarios for use in the conditions of response to incidents in real time.

Consolidation of the Fortinet and CyberSponse tools will allow to equip security experts with the patented solution which can be applied in the organizations of any scale. In it a number of specialized features which include is implemented:

• Architecture of support of "multiple lease" (multi-tenancy) with a scaling option to the level of large enterprises which helps to simplify work of SOC group of reaction and helps suppliers of managed services for security (MSSP) to implement easily services of pro-active identification of incidents and their prevention (Managed Detection and Response, MDR).
• More than 325 program adapters which provide easy integration with all main products from different suppliers and their security technologies, providing building of the uniform, centralized point of management for solving of tasks of monitoring and control.
• More than 200 ready scenarios with simple setup which help to automate execution of procedures of response to incidents and other routine functions.
• Management tools incidents with function of the overview of their distribution on a time line and estimates of the mentioned resources and also the instrument of automated scoring of payback (ROI) or the received economy.
• Management tools selective access with role setup for safe work with user data.

the Organizations still are in search of the tools capable to give them the developed opportunities for response to incidents (incident response, IR) and increasing efficiency of protection. The large companies will be able to achieve effective objectives now, using the SOAR solution of Fortinet. It will help them to improve the level of automation and orchestration of the transactions executed at response to incidents, having provided maximum efficiency, economy of costs and high high-speed performance,

It is an ideal combination. For CyberSponse there was always the main thing an achievement of the maximum simplicity and efficiency at accomplishment of problems of security due to application not just of the innovation, and really disruptive technologies. The integrated power of the Fortinet Security Fabric platform and CyberSponse SOAR technology gives to consumers the tool for building of the global managed protection which allows to apply hundreds of other products, simplifying support of all complex thanks to application of ready operational scenarios,

Conditions of the carried-out transaction are not disclosed.

2019: Fortinet purchased CyberSponse

On December 12, 2019 Fortinet announced CyberSponse acquisition, but the cost and other terms of transaction did not begin to open.

It is known that Fortinet integrates the CyOPs platform with the set Security Fabric which firewalls, the systems of detection of vulnerabilities and protection of devices, etc. enter. Also it is expected that CyOPs technologies will find application in systems Fortinet FortiAnalyzer, FortiSIEM and FortiGate.

Fortinet announced CyberSponse acquisition, but the cost and other terms of transaction did not begin to open

The growing number of the tools of security implemented by the companies led to emergence of operational difficulties which do the organizations more vulnerable for cracking — the CEO of Fortinet Ken Xie said.

According to him, the centralized safety features of CyberSponse will allow clients of the company "standardize and scale processes", connected with prevention of cracking.

By December, 2019 CyOPs supports connection more than 325 tools and technologies of information security. Also CyberSponse offers about 200 automated processes which allow to react independently the platform to threat under the set conditions.

For example, CyOPs can check the IP address from which the external web request proceeds, to verify information with the database of the harmful addresses, to block attempt of cracking and to notify on it the attacked company.^[1]

Notes