RiskProfiler - External Threat Exposure Management Features
Orchestration (5)
-
Asset Management
Lets users group and organize their endpoints to gather threat intelligence on specific technologies.
-
Security Workflow Automation
Reduces the need for IT and security professionals to iterate repetitive tasks associated with gathering threat information.
Deployment
The process in which users integrate their existing security systems and endpoints to the threat intelligence platform.
Sandboxing
A feature that allows security testing and information gathering to occur in a secure, resource independent environment.
-
Remediation Management
Identify and orchestrate execution of actions needed to restore systems to optimal conditions
Information (5)
-
Proactive Alerts
Prior to security incidents, the product will alert users when a new, relevant vulnerability or threat is discovered.
-
Malware Detection
Provides multiple techniques and information sources to alert users of malware occurrences.
-
Intelligence Reports
The ability for users to produce reports outlining detailed and personalized threat information
-
Threat Intelligence
Information to prevent, understand and identify cyber threats
Real-time Alerts
Receive notification of issues as soon as they occur
Personalization (6)
Endpoint Intelligence
Analysis for users to examine threat intelligence data specific to their endpoint devices.
Security Validation
The product has a recurring examination process to update your intelligence reports as new threats emerge.
Dynamic/Code Analysis
The ability to examine your application, website, or database's code to uncover zero-day vulnerabilities.
Event Analysis
Investigate security threats and validate malicious activity
Web-Application Security
Identify and respond to security threats to web applications
Application Security
Identify and respond to security threats to developed applications
Identification (8)
Reseller Database
Provide a database or authorized and unauthorized resellers
Monitoring
Monitor online product and pricing information
Violations
Identify pricing or brand policy violations
Social Media Monitoring
Track activity on sites such as Facebook, Twitter, Instagram, etc.
Mobile App Monitoring
Domain Monitoring
Monitoring multiple domains for occurrences of brand logos, keywords, names, and more.
Marketplace Monitoring
Monitoring multiple marketplaces for mentions or transactions related to brand logos, keywords, names, and more.
Paid Search Monitoring
Monitor paid campaigns for occurrences of brand logos, keywords, names, and more to track any infringements.
Enforcement (4)
Communication
Ability to warn resellers about violations
Plans
Provide plans to enforce pricing and brand policies
Track
Track the effectiveness of enforcement activities
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Risk Analysis (3)
-
Risk Scoring
Identifies and scores potential network security risks, vulnerabilities, and compliance impacts of attacks and breaches.
-
Reporting
Creates reports outlining log activity and relevant metrics.
-
Risk-Prioritization
Allows for vulnerability ranking by customized risk and threat priorities.
Vulnerability Assesment (4)
-
Vulnerability Scanning
Analyzes your existing network and IT infrastructure to outline access points that can be easily compromised.
-
Vulnerability Intelligence
Stores information related to common vulnerabilities and how to resolve them once incidents occur.
-
Contextual Data
Identify risk data attributes such as description, category, owner, or hierarchy.
-
Dashboards
Provides the ability to create custom reporting dashboards to further explore vulnerability and risk data.
Automation (4)
-
Automated Remediation
Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
-
Workflow Automation
Streamlines the flow of work processes by establishing triggers and alerts that notify and route information to the appropriate people when their action is required within the compensation process.
-
Security Testing
Allows users to perfrom hands-on live simulations and penetration tests.
-
Test Automation
Runs pre-scripted vulnerability scans and security tests without requiring manual work.
Functionality (12)
-
Customized Vendor Pages
Allows vendors to own and update their vendor page with security and compliance documentation to share with customers
-
Centralized Vendor Catalog
Allows companies to assess vendors profiles in a centralized catalog
-
Questionnaire Templates
Offers standardized security and privacy framework questionnaire templates
-
User Access Control
Offers role based access controls to allow only permissioned users to utilize various parts of the software.
Monitoring - Deep Web
Monitors select keywords on the deep web, which are non-indexed parts of the internet not available on the surface web.
Monitoring - Dark Web
Monitors select keywords on the dark areas of the web, which are only accessible via Tor and I2P, such as illicit marketplaces and dark forums.
Analysis
Provides context around identified information, including historical threat data, threat location data from geotags or inferred data, threat actors names, relationships, URLs, and other relevant information to conduct further investigations.
Ticketing
Integrates into ticketing or CRM platforms via API integrations.
Simple Search
Search through real-time and historical data without using technical query language.
Leak Source
Provides additional context and analysis to help identify the source of leaked information.
Centralized Dashboard
Offers a centralized dashboard to monitor, collect, process, alert, analyse and search through data flagged by the software.
Real-Time Alerts
Enables real-time alerts and reporting through push notifications in a mobile app, email, or sms alerts.
Risk assessment (4)
-
Risk Scoring
Offers built-in or automated vendor risk scoring
-
4th Party Assessments
Offers tools to assess fourth parties -- your vendor's vendors
-
Monitoring And Alerts
Monitors changes in risk and sends notifications, alerts, and reminders for specific actions including: upcoming assessments, profile access requests, etc
-
AI Monitoring
Uses AI to alert administrators to changes in risk scoring through continuous monitoring.
Monitoring (9)
-
Gap Analysis
Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.
-
Vulnerability Intelligence
Stores information related to common vulnerabilities and how to resolve them once incidents occur.
-
Compliance Monitoring
Monitors data quality and sends alerts based on violations or misuse.
-
Continuous Monitoring
Aggregates real-time updates and historical data from multiplate internal and external data sources to support ongoing proactive threat response.
Server Monitoring
Continuously scan servers on a designated network to monitor health and search for any irregularities or failures
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Vendor Performance
Track vendor performance using supplier data such as a history of transactions and contracts.
Notifications
Send alerts and notifications when corrective actions are needed to address supplier risk.
Oversight
Perform ongoing due diligence activities to auto calculate overall risk for each vendor.
Asset Management (4)
-
Asset Discovery
Detects new assets as they enter cloud environments and networks to add to asset inventory.
-
Shadow IT Detection
Identifies unsanctioned software.
-
Change Management
Provides tools to track and implement required security policy changes.
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Risk Management (4)
-
Risk-Prioritization
Allows for vulnerability ranking by customized risk and threat priorities.
-
Reconnaissance
Gathers information about the system and potential exploits to be tested.
-
At-Risk Analysis
Uses machine learning to identify at-risk data.
-
Threat Intelligence
Stores information related to common threats and how to resolve them once incidents occur.
Risk Assessment (2)
Scoring
Users can assign scores to suppliers based on the estimated risk of doing business with them.
AI
Utilize artificial intelligence to analyze third party risks.
Risk Control (3)
Reviews
Review vendor contracts and profiles to ensure compliance with regulation and internal policies.
Policies
Manage and enforce internal policies related to vendor risk management and controls.
Workflows
Provide workflows to mitigate risk and escalate issues proactively.
Reporting (3)
Templates
Include reporting templates for activities such as audits and vendor evaluation.
Centralized Data
Consolidate data from multiple systems that manage supplier information.
360 View
Provide a 360 view of suppliers which can be shared with internal or external users.
Generative AI (6)
-
AI Text Summarization
Condenses long documents or text into a brief summary.
AI Text Summarization
Condenses long documents or text into a brief summary.
Generate Attack Scenarios
Use AI to propose possible threat actor tactics, techniques, and procedures against specific environments or assets.
Generate Threat Detection Rules
Use AI to automatically create detection rules based on observed patterns.
Generate Threat Summaries
Use AI to produce concise summaries of complex threat reports or alerts.
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Vulnerability Management - Digital Risk Protection (DRP) Platforms (6)
Vulnerability Assessment
Incorporates real-time data from various sources to identify potential threats and vulnerabilities.
Digital Footprint Mapping
Creates a digital footprint of an organization's ecosystem to identify exposed digital assets.
Fraud Detection
Identifies and mitigates fraudulent websites, phishing attacks, and other social engineering attacks targeting employees and customers.
Data Leak Detection
Detects sensitive data published on the dark web and other paste sites.
Anti-Counterfeiting
Protects against illegal online sales and counterfeiting.
Brand Protection
Analyzes an organization’s online presence to identify instances of brand impersonation.
Incident Response Digital Risk Protection (DRP) Platforms (3)
Threat Remediation
Outlines clear takedown processes for threats.
Automated Reponses
Implements automated responses to certain types of incidents.
Incident Response Capabilities
Provides resources for a coordinated and efficient response to security incidents, facilitating investigation, containment, and recovery efforts.
Reporting and Analytics - Digital Risk Protection (DRP) Platforms (3)
Threat Trends Analysis
Offers analytics features to provide insights into digital risk trends and the effectiveness of mitigation strategies
Risk Assessment Reports
Generates reports that assess the overall digital risk posture of an organization. Reports may include an analysis of the identified threats and vulnerabilities.
Customizable Dashboards
Offers dashboards that can be customized based on the key performance indicators of an organization.
Generative AI - Exposure Management Platforms (2)
Predictive Analytics
Uses AI-driven models to analyze historical and current data to enable organizations to manage new exposures proactively.
Automated Threat Detection
Uses AI algorithms to analyze data for patterns and anomalies that signify potential risks.
Risk Identification and Assessment - Exposure Management Platforms (2)
Comprehensive Risk Assessment
Identifies, evaluates, and monitors various types of risks to understand the overall risk exposure and prioritize them based on potential impact.
Advanced Analytics and Reporting
Includes tools for deep analysis of risk data, providing insights into trends and patterns that support strategic risk assessment and decision-making.
Monitoring and Integration - Exposure Management Platforms (2)
Integration and Data Consolidation
Ensures seamless interaction with other systems and unification of risk data, enabling a comprehensive view and efficient management of risk exposure.
Real-time Monitoring and Alerts
Allows for continuous surveillance of risk factors, providing timely alerts to mitigate emerging risks effectively.
Generative AI - Vendor Security and Privacy Assessment (2)
Text Summarization
Utilizes AI to summarize security questionnaires.
Text Generation
Automate text responses to common security assessment questions.
Agentic AI - Threat Intelligence (4)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Multi-step Planning
Ability to break down and plan multi-step processes
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Decision Making
Makes informed choices based on available data and objectives
Agentic AI - Third Party & Supplier Risk Management (2)
Adaptive Learning
Improves performance based on feedback and experience
Decision Making
Makes informed choices based on available data and objectives
Additional Functionality (78)
Customizable Templates
Pre-designed layouts that can be customized to match preferences and requirements
Access Control
Regulate who can view information within the system
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Keyword Tracking
Track and monitor a specific set of keywords
Search/Filter
Search and filter data across systems to locate required information by entering keywords or certain criteria
Case Management
Work on a set of tasks related to a particular charge, patient, legal issue or any other complex entity or process
Competitive Analysis
Evaluating strengths and weaknesses of companies with the same target audience
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Intellectual Property Protection
The process of discovering content on the web that is same or similar to logos, trademarks or other proprietary content
Data Import/Export
Import and export data to and from software applications
Document Storage
Store and organize documents in a centralized system
Collaboration Tools
Provides a channel for team members to share media files, communicate, and work together
Investigation Management
Oversee people and resources to carry out an investigation
Prioritization
Arrange tasks based on the level of priority or urgency
Metadata Management
Collect and maintain structured information that describes data or content
Content Library
Centralized repository to store content and assets
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Brand Guidelines
Provides centralized location and shareable capabilities for storage, distribution, and editing of brand guidelines
Brand Tracking
Monitor social media posts or web that mention a particular brand
Engagement Tracking
Tracks metrics that provide insight into how a user interacts with any interface or product
Change Management
Track and monitor efficient handling of all changes/transitions
Brand Management
The process of developing, monitoring, and maintaining the brand value, reputation, and awareness across the target audience.
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Violation Tracking
Identify and flag system, guidelines, or branding violations/suspicious behavior by users, customers, vendors, or partners.
SSL Security
Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
API
Application programming interface that allows for integration with other systems/databases
Threat Response
Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
Endpoint Protection
Protect users working remotely and provide secure environments for personal devices to access company programs
Maintenance Scheduling
Schedule predetermined or ad hoc maintenance services and labor requests
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
Application Security
Identify and respond to security threats to developed applications
Encryption
Convert data into a code for security
Network Security
Prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources
Real-Time Reporting
Active reporting of data and metrics
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Authentication
Verify the identity of users/devices to enable secure access
Financial Data Protection
Anti Virus
Prevents, detects and removes malware
Secure Data Storage
Securely stores data to prevent data loss or breaches
Virus Definition Update
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
VPN
Extend virtual private network over public networks to enable protected information exchange
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Anti Spam
Techniques to prevent and filter unwanted or unsolicited email spam from reaching a user's inbox
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Data Visualization
Graphical representation of data
Alerts/Escalation
System alerts about the need to escalate an issue or request
Data Security
Protect sensitive data for digital privacy
Real-Time Reporting
Active reporting of data and metrics
Real-Time Analytics
Analyze and gain insights into data in real-time
Network Monitoring
Tracks and makes accessible data on the health of servers and other network components.
API
Application programming interface that allows for integration with other systems/databases
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Behavior Analytics
Track and analyze user behavior within a system or network
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Profiling
Scanning of users & devices to ensure there are no potential threats
Cloud Backup
Process of backing up of files and applications to cloud-based remote servers for protection of data
Data Visualization
Graphical representation of data
Activity Monitoring
Track and report on everything that happens within the system or network
Network Scanning
Scanning networks to identify security threats
Event Logs
A chronological record of actions or occurrences within a network, software, or process
Monitoring
Observe and track the demand, usage, progress or quality of a system, product, or user
Server Monitoring
Continuously scan servers on a designated network to monitor health and search for any irregularities or failures
Vulnerability Scanning
Discover patch statuses and vulnerabilities
Incident Reporting
Report and update incidents related to health or workplace injuries that occur on a job or en route to a job site
Activity Tracking
Track and document all activities across devices, networks, and other systems
Reporting & Statistics
Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Network Provisioning
Set up and configure network resources to make them accessible for authorized users, devices and servers
Prioritization
Arrange tasks based on the level of priority or urgency
Threat Response
Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
Real-Time Data
Receive data and information in real time
IT Reporting
Tracking KPIs over a certain period to assess helpdesk issues, ticket status & resolution, costs and revenue stats, assets usage & more