DeCYFIR by CYFIRMA Features
Orchestration (5)
-
Asset Management
Lets users group and organize their endpoints to gather threat intelligence on specific technologies.
-
Security Workflow Automation
Reduces the need for IT and security professionals to iterate repetitive tasks associated with gathering threat information.
-
Deployment
The process in which users integrate their existing security systems and endpoints to the threat intelligence platform.
-
Sandboxing
A feature that allows security testing and information gathering to occur in a secure, resource independent environment.
Remediation Management
Identify and orchestrate execution of actions needed to restore systems to optimal conditions
Information (5)
-
Proactive Alerts
Prior to security incidents, the product will alert users when a new, relevant vulnerability or threat is discovered.
-
Malware Detection
Provides multiple techniques and information sources to alert users of malware occurrences.
-
Intelligence Reports
The ability for users to produce reports outlining detailed and personalized threat information
Threat Intelligence
Information to prevent, understand and identify cyber threats
Real-time Alerts
Receive notification of issues as soon as they occur
Personalization (6)
-
Endpoint Intelligence
Analysis for users to examine threat intelligence data specific to their endpoint devices.
-
Security Validation
The product has a recurring examination process to update your intelligence reports as new threats emerge.
-
Dynamic/Code Analysis
The ability to examine your application, website, or database's code to uncover zero-day vulnerabilities.
Event Analysis
Investigate security threats and validate malicious activity
Web-Application Security
Identify and respond to security threats to web applications
Application Security
Identify and respond to security threats to developed applications
Performance (5)
Issue Tracking
Track issues as vulnerabilities are discovered. Documents activity throughout the resolution process.
Detection Rate
The rate at which scans accurately detect all vulnerabilities associated with the target.
False Positives
The rate at which scans falsely indicate detection of a vulnerability when no vulnerabilitiy legitimately exists.
Automated Scans
Runs pre-scripted vulnerability scans without requiring manual work.
Anomaly/Malware Detection
Automatically identify and flag unusual behaviors and malicious software
Network (6)
Compliance Testing
Allows users to scan applications and networks for specific compliance requirements.
Perimeter Scanning
Analyzes network devices, servers and operating systems for vulnerabilities.
Configuration Monitoring
Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.
Vulnerability Scanning
Discover patch statuses and vulnerabilities
Source-Code Scanning
Scan the initial code written for application development
Web Scanning
Application (4)
Manual Application Testing
Allows users to perfrom hands-on live simulations and penetration tests.
Static Code Analysis
Scans application source code for security flaws without executing it.
Black Box Testing
Scans functional applications externally for vulnerabilities like SQL injection or XSS.
Risk Analysis
Analyze potential risks across the organization
Risk Analysis (3)
Risk Scoring
Identifies and scores potential network security risks, vulnerabilities, and compliance impacts of attacks and breaches.
Reporting
Creates reports outlining log activity and relevant metrics.
Risk-Prioritization
Allows for vulnerability ranking by customized risk and threat priorities.
Vulnerability Assesment (4)
Vulnerability Scanning
Analyzes your existing network and IT infrastructure to outline access points that can be easily compromised.
Vulnerability Intelligence
Stores information related to common vulnerabilities and how to resolve them once incidents occur.
Contextual Data
Identify risk data attributes such as description, category, owner, or hierarchy.
Dashboards
Provides the ability to create custom reporting dashboards to further explore vulnerability and risk data.
Automation (4)
Automated Remediation
Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Workflow Automation
Streamlines the flow of work processes by establishing triggers and alerts that notify and route information to the appropriate people when their action is required within the compensation process.
Security Testing
Allows users to perfrom hands-on live simulations and penetration tests.
Test Automation
Runs pre-scripted vulnerability scans and security tests without requiring manual work.
Detection (3)
Malware Detection
Provides multiple techniques and information sources to alert users of malware occurrences.
Compliance Monitoring
Monitors data quality and send alerts based on violations or misuse.
Threat Alerting
Identifies and alerts administrators of threats, issues, incidents and requests related to SaaS applications.
Analysis (4)
Malware Evaluation
Tools to test an object to see whether or not it qualifies as malware.
Sandboxing
Provides a resource-isolated environment to examine malware and evaluate objects against a database of known threats.
Threat Intelligence
Stores information related to common threats and how to resolve them once incidents occur.
File Analysis
Analyze file contents to identify malware components or unknown and advanced threats.
Response (3)
Response Automation
Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Malware Removal
Facilitates the remediation of network, endpoint, and application malware malware.
Data Protection
Protects informatin stored on premises and in the cloud. Prompts additional authentication for suspicious users.
Functionality (10)
Monitoring - Deep Web
Monitors select keywords on the deep web, which are non-indexed parts of the internet not available on the surface web.
Monitoring - Dark Web
Monitors select keywords on the dark areas of the web, which are only accessible via Tor and I2P, such as illicit marketplaces and dark forums.
Analysis
Provides context around identified information, including historical threat data, threat location data from geotags or inferred data, threat actors names, relationships, URLs, and other relevant information to conduct further investigations.
Ticketing
Integrates into ticketing or CRM platforms via API integrations.
Simple Search
Search through real-time and historical data without using technical query language.
Leak Source
Provides additional context and analysis to help identify the source of leaked information.
Centralized Dashboard
Offers a centralized dashboard to monitor, collect, process, alert, analyse and search through data flagged by the software.
Real-Time Alerts
Enables real-time alerts and reporting through push notifications in a mobile app, email, or sms alerts.
Detection
Ability to detect disinformation.
Media type
Ability to engage with a variety of media types.
Monitoring (6)
Gap Analysis
Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.
Vulnerability Intelligence
Stores information related to common vulnerabilities and how to resolve them once incidents occur.
Compliance Monitoring
Monitors data quality and sends alerts based on violations or misuse.
Continuous Monitoring
Aggregates real-time updates and historical data from multiplate internal and external data sources to support ongoing proactive threat response.
Server Monitoring
Continuously scan servers on a designated network to monitor health and search for any irregularities or failures
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Asset Management (4)
Asset Discovery
Detects new assets as they enter cloud environments and networks to add to asset inventory.
Shadow IT Detection
Identifies unsanctioned software.
Change Management
Provides tools to track and implement required security policy changes.
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Risk Management (4)
Risk-Prioritization
Allows for vulnerability ranking by customized risk and threat priorities.
Reconnaissance
Gathers information about the system and potential exploits to be tested.
At-Risk Analysis
Uses machine learning to identify at-risk data.
Threat Intelligence
Stores information related to common threats and how to resolve them once incidents occur.
Brand Signals (3)
Comparison
Compare and contrast products, brands, sentiment, etc.
AI
Provides AI generated insights.
Brand Health
Quantifies digital consumer intelligence to analyze brand health.
Brand Analytics (2)
Trend Analysis
Identification and analysis of brand or product trends.
Tracking
Capability to track and measure brand results over time.
Generative AI (7)
AI Text Summarization
Condenses long documents or text into a brief summary.
AI Text Summarization
Condenses long documents or text into a brief summary.
-
AI Text Summarization
Condenses long documents or text into a brief summary.
Generate Attack Scenarios
Use AI to propose possible threat actor tactics, techniques, and procedures against specific environments or assets.
Generate Threat Detection Rules
Use AI to automatically create detection rules based on observed patterns.
Generate Threat Summaries
Use AI to produce concise summaries of complex threat reports or alerts.
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Vulnerability Management - Digital Risk Protection (DRP) Platforms (6)
Vulnerability Assessment
Incorporates real-time data from various sources to identify potential threats and vulnerabilities.
Digital Footprint Mapping
Creates a digital footprint of an organization's ecosystem to identify exposed digital assets.
Fraud Detection
Identifies and mitigates fraudulent websites, phishing attacks, and other social engineering attacks targeting employees and customers.
Data Leak Detection
Detects sensitive data published on the dark web and other paste sites.
Anti-Counterfeiting
Protects against illegal online sales and counterfeiting.
Brand Protection
Analyzes an organization’s online presence to identify instances of brand impersonation.
Incident Response Digital Risk Protection (DRP) Platforms (3)
Threat Remediation
Outlines clear takedown processes for threats.
Automated Reponses
Implements automated responses to certain types of incidents.
Incident Response Capabilities
Provides resources for a coordinated and efficient response to security incidents, facilitating investigation, containment, and recovery efforts.
Reporting and Analytics - Digital Risk Protection (DRP) Platforms (3)
Threat Trends Analysis
Offers analytics features to provide insights into digital risk trends and the effectiveness of mitigation strategies
Risk Assessment Reports
Generates reports that assess the overall digital risk posture of an organization. Reports may include an analysis of the identified threats and vulnerabilities.
Customizable Dashboards
Offers dashboards that can be customized based on the key performance indicators of an organization.
Agentic AI - Threat Intelligence (4)
-
Autonomous Task Execution
Capability to perform complex tasks without constant human input
-
Multi-step Planning
Ability to break down and plan multi-step processes
-
Proactive Assistance
Anticipates needs and offers suggestions without prompting
-
Decision Making
Makes informed choices based on available data and objectives
Agentic AI - Vulnerability Scanner (2)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Additional Functionality (94)
SSL Security
Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
API
Application programming interface that allows for integration with other systems/databases
Threat Response
Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
Endpoint Protection
Protect users working remotely and provide secure environments for personal devices to access company programs
Maintenance Scheduling
Schedule predetermined or ad hoc maintenance services and labor requests
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
Application Security
Identify and respond to security threats to developed applications
Encryption
Convert data into a code for security
Network Security
Prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources
Real-Time Reporting
Active reporting of data and metrics
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Authentication
Verify the identity of users/devices to enable secure access
Financial Data Protection
Anti Virus
Prevents, detects and removes malware
Secure Data Storage
Securely stores data to prevent data loss or breaches
Virus Definition Update
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
VPN
Extend virtual private network over public networks to enable protected information exchange
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Anti Spam
Techniques to prevent and filter unwanted or unsolicited email spam from reaching a user's inbox
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Data Visualization
Graphical representation of data
Alerts/Escalation
System alerts about the need to escalate an issue or request
Data Security
Protect sensitive data for digital privacy
Runtime Container Security
Continuously vetting activities within the container application environment including hosts, open ports, protocols and payloads.
Asset Discovery
Threat Intelligence
Information to prevent, understand and identify cyber threats
Vulnerability Protection
Safeguards to protect network vulnerabilities
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Vulnerability/Threat Prioritization
Classify levels of threat and organize actions based on priorities
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
SQL Injections
Protect against code driven website security attack techniques
Real-Time Analytics
Analyze and gain insights into data in real-time
Threat Protection
Protect incoming and outgoing communications against malware, spam, display spoofing, and other threats
Web-Application Security
Identify and respond to security threats to web applications
Password Protection
Protect passwords from security threats
Website Crawling
Crawling and indexing web pages
Vulnerability Assessment
The process of identifying, quantifying, and prioritizing the vulnerabilities in a system.
SSL Security
Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
API
Application programming interface that allows for integration with other systems/databases
Threat Response
Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
Endpoint Protection
Protect users working remotely and provide secure environments for personal devices to access company programs
Maintenance Scheduling
Schedule predetermined or ad hoc maintenance services and labor requests
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
Application Security
Identify and respond to security threats to developed applications
Encryption
Convert data into a code for security
Network Security
Prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources
Real-Time Reporting
Active reporting of data and metrics
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Authentication
Verify the identity of users/devices to enable secure access
Financial Data Protection
Anti Virus
Prevents, detects and removes malware
Secure Data Storage
Securely stores data to prevent data loss or breaches
Virus Definition Update
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
VPN
Extend virtual private network over public networks to enable protected information exchange
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Anti Spam
Techniques to prevent and filter unwanted or unsolicited email spam from reaching a user's inbox
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Data Visualization
Graphical representation of data
Alerts/Escalation
System alerts about the need to escalate an issue or request
Data Security
Protect sensitive data for digital privacy
Real-Time Reporting
Active reporting of data and metrics
Real-Time Analytics
Analyze and gain insights into data in real-time
Network Monitoring
Tracks and makes accessible data on the health of servers and other network components.
API
Application programming interface that allows for integration with other systems/databases
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Behavior Analytics
Track and analyze user behavior within a system or network
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Profiling
Scanning of users & devices to ensure there are no potential threats
Cloud Backup
Process of backing up of files and applications to cloud-based remote servers for protection of data
Data Visualization
Graphical representation of data
Activity Monitoring
Track and report on everything that happens within the system or network
Network Scanning
Scanning networks to identify security threats
Event Logs
A chronological record of actions or occurrences within a network, software, or process
Monitoring
Observe and track the demand, usage, progress or quality of a system, product, or user
Server Monitoring
Continuously scan servers on a designated network to monitor health and search for any irregularities or failures
Vulnerability Scanning
Discover patch statuses and vulnerabilities
Incident Reporting
Report and update incidents related to health or workplace injuries that occur on a job or en route to a job site
Activity Tracking
Track and document all activities across devices, networks, and other systems
Reporting & Statistics
Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Network Provisioning
Set up and configure network resources to make them accessible for authorized users, devices and servers
Prioritization
Arrange tasks based on the level of priority or urgency
Threat Response
Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
Real-Time Data
Receive data and information in real time
IT Reporting
Tracking KPIs over a certain period to assess helpdesk issues, ticket status & resolution, costs and revenue stats, assets usage & more

