ARMO Platform Features

Management (3)

Governance: Allows users to create, edit, and relinquish user access privileges.
Logging and Reporting: Provides required reports to manage business. Provides adequate logging to troubleshoot and support auditing.
API / Integrations: Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.

Anomaly Detection: Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns.
Data Loss Prevention: Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest.
Security Auditing: Analyzes data associated with security configurations and infrastructure to provide vulnerability insights and best practices.
Cloud Gap Analytics: Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.

Risk Scoring: Provides risk scoring for suspicious activity, vulnerabilities, and other threats.
Secrets Management: Provides tools for managing authentication credentials such as keys and passwords.
Security Auditing: Analyzes data associated with security configurations and infrastructure to provide vulnerability insights and best practices.
Configuration Management: Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.
Policy Enforcement: Allows administrators to set policies for security and data governance.
Auditing: Analyzes data associated with web traffic and site performance to provide vulnerability insights and best practices.
Workflow Management: Creates new or streamlines existing workflows to better handle IT support tickets and service.

Continuous Image Assurance: Provides image verification features to establish container approval requirements and continuously monitor for policy violations to identify containers with known vulnerabilities, malware, and other threats.
Behavior Monitoring: Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns and fraud indicators.
Observability: Generate insights across IT systems utilizing event metrics, logging, traces, and metadata.

Dynamic Image Scanning: Scans application and image source code for security flaws without executing it in a live environment
Runtime Protection: Monitors container activities and detects threats across containers, networks, and cloud service providers.
Workload Protection: Protects compute resources across a networks and cloud service providers. Serves as Firewall and prompts additional authentication for suspicious users.
Network Segmentation: Allows administrative control over network components, mapping, and segmentation.

Compliance Monitoring: Monitors data quality and sends alerts based on violations or misuse.
Anomoly Detection: Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns.
Data Loss Prevention: Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest.
Cloud Gap Analytics: Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.

Issue Tracking: Track issues as vulnerabilities are discovered. Documents activity throughout the resolution process.
Detection Rate: The rate at which scans accurately detect all vulnerabilities associated with the target.
False Positives: The rate at which scans falsely indicate detection of a vulnerability when no vulnerabilitiy legitimately exists.
Automated Scans: Runs pre-scripted vulnerability scans without requiring manual work.

Compliance Testing: Allows users to scan applications and networks for specific compliance requirements.
Perimeter Scanning: Analyzes network devices, servers and operating systems for vulnerabilities.
Configuration Monitoring: Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.

Manual Application Testing: Allows users to perfrom hands-on live simulations and penetration tests.
Static Code Analysis: Scans application source code for security flaws without executing it.
Black Box Testing: Scans functional applications externally for vulnerabilities like SQL injection or XSS.

DLP Configuration: Offers data loss prevention tools to protect data from leaving the environments it is allowed to.
Configuration Monitoring: Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.
Unified Policy Management: Allows users to track and control security policies across cloud services and providers.
Adaptive Access Control: Provides a risk-based approach to determining trust within the network.
API / Integrations: Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.

Threat Hunting: Facilitates the proactive search for emerging threats as they target servers, endpoints, and networks.
Vulnerability Scanning: Analyzes your existing cloud, network, and IT infrastructure to outline access points that can be easily compromised.
Vulnerability Intelligence: Stores information related to new and common vulnerabilities and how to resolve them once incidents occur.
Risk-Prioritization: Allows for vulnerability ranking by customized risk and threat priorities.

Workload and container security: Scans containers, workloads, and kubernetes clusters for any misconfigurations or vulnerabilities.
Threat detection and response: Monitor live environments for anomalies, risks and threats to ensure rapid response.
DevSecOps Integrations: Integrates with CI/CD pipelines to detect security risks early in the development life cycle.
Unified Visibility: Consolidate all security data across the tech and cloud stacks into one dashboard.