Sonrai Security Features
Management (3)
Dashboards and Reports
Access pre-built and custom reports and dashboards.
Workflow Management
Creates new or streamlines existing workflows to better handle IT support tickets and service.
Administration Console
Provides Administration tools/console that are easy to use and learn for routine maintenance tasks
Operations (3)
Governance
Allows users to create, edit, and relinquish user access privileges.
Logging and Reporting
Provides required reports to manage business. Provides adequate logging to troubleshoot and support auditing.
API / Integrations
Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.
Security Controls (4)
Anomaly Detection
Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns.
Data Loss Prevention
Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest.
Security Auditing
Analyzes data associated with security configurations and infrastructure to provide vulnerability insights and best practices.
Cloud Gap Analytics
Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.
Security (7)
-
Compliance Monitoring
Monitors data quality and sends alerts based on violations or misuse.
-
Anomoly Detection
Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns.
Data Loss Prevention
Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest.
-
Cloud Gap Analytics
Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.
-
Compliance Monitoring
Monitors data quality and send alerts based on violations or misuse.
-
Risk Analysis
Identifies potential network security risks, vulnerabilities, and compliance impacts.
-
Reporting
Creates reports outlining log activity and relevant metrics.
Compliance (3)
-
Governance
Allows users to create, edit, and relinquish user access privileges.
Data Governance
Ensures user access management, data lineage, and data encryption.
Sensitive Data Compliance
Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.
Administration (20)
-
Policy Enforcement
Allows administrators to set policies for security and data governance.
-
Auditing
Analyzes data associated with web traffic and site performance to provide vulnerability insights and best practices.
Workflow Management
Creates new or streamlines existing workflows to better handle IT support tickets and service.
Policy, User, and Role Management
Creates access requirements and standards and establishes user, roles, and access rights.
Approval Workflows
Allows administrators to approve or reject access changes to using defined workflows.
Automated Provisioning
Automates provisioning and deprovisioning to reduce the amount of administrative manual work.
Bulk Changes
Reduces manual administrative work.
Centralized Management
Manages identity information from on-premise and cloud applications.
Self-Service Access Requests
Automatically allows access if users meet policy requirements.
Configurable Workflow
Configure existing workflows to meet your organization's needs
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
User Session Management
Maintain and control user sessions (including session tracking, timeouts and termination) in a web application or system
Password Management
Generate and store passwords in an encrypted database and assist in retrieving lost or forgotten passwords
Workflow Management
Create, design and manage workflows for repetitive tasks
Policy Management
Create, manage, and track policies and procedures within an organization
Access Management
Control and manage access to company resources
Endpoint Management
Track status, assign actions, and control access to systems for devices within the organization
-
Security Automation
Streamline the flow of work processes by establishing triggers and alerts that notify and route information to the appropriate people when their action is required within the compensation process.
-
Security Integration
Integrates additional security tools to automate security and incident response processes.
-
Multicloud Visibility
Allows users to track and control activity across cloud services and providers.
Functionality (18)
Multi-Factor Authentication
Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate.
Single Sign-On
Provides a single access point for users to access multiple cloud products without multiple logins.
BYOD support
Enables users to bring-your-own-device to access company applications.
Password Vault
Stores credentials and passwords in a secure vault. Eliminates hard-coded passwords. Hides passwords from users.
Centralized management
Ensures that credentials are centrally stored (in a secure vault) and when changed, that systems remain connected.
Role-based security
Allows privileges based on roles, such as business unit or other factors.
Live notifications
Configure which events will trigger a notification to prevent privileged access abuse in real-time.
Live session recording & playback
Offers live session recording and playback for compliance and auditing purposes.
Hide passwords
Offers the option to hide passwords when sharing with users, such as contract workers
Temporary, time-limited privilege
Allows for temporary privileges for a defined task or period of time, to reduce the risk of credential abuse.
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Remote Monitoring & Management
Remotely monitor and manage client networks, endpoints, systems, and devices via locally installed applications
Credential Management
Manage usernames, account numbers, passwords, biometric data, public access keys, and other documentation
Incident Management
Manage and track all disruptions and incidents
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Real-Time Notifications
Notifications that are delivered to users as soon as an event occurs
Network Security
Prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources
Multi-Factor Authentication
Request two or more credentials to prove user's identity before granting access to systems
Monitoring (9)
Audit Logging
Provides audit logs for compliance reasons.
Activity Logging
Monitors, records, and logs both real-time and post-event activity.
Anomaly Detection
Detects abnormal user behavior to mitigate risks.
Investigate
Investigate identity threats with contextual user information.
Monitoring
Monitor & detect malicous identity and privileges activity
Misconfigurations
Identify identity-related misconfigurations.
Integrate
Offers integrations to identity store providers.
Visability
Provide full coverage of identity estate with granular detail.
Continuous Monitoring
Conduct tracking and assessment of application and device behavior without breaks or interruptions
Reporting (3)
Audit log
Creates a comprehnsive log of all activities when utilizing Privileged Access Management Software software.
Reporting
Includes reporting functionality.
Event Logs
A chronological record of actions or occurrences within a network, software, or process
Activity Monitoring (4)
-
Usage Monitoring
Tracks infrastructure resource needs and alerts administrators or automatically scales usage to minimize waste.
-
Database Monitoring
Monitors performance and statistics related to memory, caches and connections.
-
API Monitoring
Detects anomalies in functionality, user accessibility, traffic flows, and tampering.
-
Activity Monitoring
Actively monitors status of work stations either on-premise or remote.
Configuration (5)
DLP Configuration
Offers data loss prevention tools to protect data from leaving the environments it is allowed to.
Configuration Monitoring
Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.
Unified Policy Management
Allows users to track and control security policies across cloud services and providers.
Adaptive Access Control
Provides a risk-based approach to determining trust within the network.
API / Integrations
Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.
Visibility (2)
Multicloud Visibility
Provides all-encompassing display and analysis of environments, resources, traffic, and activity across networks.
Asset Discovery
Detect new assets as they enter a cloud environments and networks to add to asset inventory.
Vulnerability Management (4)
Threat Hunting
Facilitates the proactive search for emerging threats as they target servers, endpoints, and networks.
Vulnerability Scanning
Analyzes your existing cloud, network, and IT infrastructure to outline access points that can be easily compromised.
Vulnerability Intelligence
Stores information related to new and common vulnerabilities and how to resolve them once incidents occur.
Risk-Prioritization
Allows for vulnerability ranking by customized risk and threat priorities.
Remediation (2)
Remediation
Remove unauthorized accounts and excessive privileges
Audit
Provides full audit trail with notifications, ticketing, and compliance information.
Access control - Cloud Infrastructure Entitlement Management (CIEM) (4)
Policy Management
Helps define policies for access management
Fine-Grained Access Control
Uses principle of least privilege to ensure access control at granular level of specific resources and apps
Role-Based Access Control (RBAC)
Enables organization to define roles and assign access based on these roles
AI-driven access control
Streamlines the management of user access through AI
Monitoring - Cloud Infrastructure Entitlement Management (CIEM) (2)
Monitoring
Tracks and logs user activities, access requests, and changes to entitlements
AI-based detection
Detects and remediates risky, misconfigured permissions for human and machine identities using AI
Auditing - Cloud Infrastructure Entitlement Management (CIEM) (2)
Visibility
Provides visibility into all users and identities across the system
Compliance Reporting
Provides reporting capabilities to demonstrate compliance
Security - Cloud-Native Application Protection Platform (CNAPP) (4)
Workload and container security
Scans containers, workloads, and kubernetes clusters for any misconfigurations or vulnerabilities.
Threat detection and response
Monitor live environments for anomalies, risks and threats to ensure rapid response.
DevSecOps Integrations
Integrates with CI/CD pipelines to detect security risks early in the development life cycle.
Unified Visibility
Consolidate all security data across the tech and cloud stacks into one dashboard.
Artificial Intelligence - Cloud-Native Application Protection Platform (CNAPP) (3)
Intelligent remediations and suggestions
Offers an AI-powered engine to provide remediation guidance to the user based on the type of threat.
Risk prioritization
Uses context-aware analysis to identify critical and non-critical risks across vulnerabilities.
Anomaly detection using machine learning
Help detect anomalies across cloud workloads which could help present a potential breach.
Cloud Configuration Management - Cloud-Native Application Protection Platform (CNAPP) (2)
Multi-cloud visibility
Offers a unified view of all cloud assets across multi-cloud platforms such as AWS, Azure, GCP etc.
Cloud Security Posture Management (CSPM)
Continuously scans cloud environments for any misconfigurations, and provide benchmarks and guided remediation.
Agentic AI - Cloud Security Monitoring and Analytics (3)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Decision Making
Makes informed choices based on available data and objectives
Agentic AI - Cloud-Native Application Protection Platform (CNAPP) (2)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Adaptive Learning
Improves performance based on feedback and experience
Agentic AI - Cloud Detection and Response (CDR) (3)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Decision Making
Makes informed choices based on available data and objectives
Services - Cloud Detection and Response (CDR) (1)
Managed Services
Offers managed detection and response services.
Additional Functionality (49)
Role-Based Permissions
Set & manage permission levels based on user roles and restrict access to only authorized individuals
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Approval Process Control
Manage the process of evaluating documents or requests submitted for approval
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
Activity Tracking
Track and document all activities across devices, networks, and other systems
Data Verification
Process of checking different types of data for accuracy to avoid errors or inconsistencies
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Secure Data Storage
Securely stores data to prevent data loss or breaches
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
Behavioral Analytics
Track and analyse user behavior within a system or network
Application Access Control
Define levels of authorization for access to specific applications
Multiple User Accounts
Allow multiple users with individual logins and varying permissions to use the same account, software, portal, or service
PCI Compliance
Store, process, and transmit cardholder data in compliance with the Payment Card Industry Data Security Standard (PCI DSS)
API
Application programming interface that allows for integration with other systems/databases
User Activity Monitoring
Device Auto Discovery
Automatically scan the network for devices and take pre-defined actions upon discovery
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Network Monitoring
Tracks and makes accessible data on the health of servers and other network components.
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Threat Intelligence
Information to prevent, understand and identify cyber threats
Role-Based Permissions
Set & manage permission levels based on user roles and restrict access to only authorized individuals
Data Analysis Tools
Analyze survey results via statistical testing or crosstabs directly within the software
Anomaly/Malware Detection
Automatically identify and flag unusual behaviors and malicious software
Risk Alerts
Notifying as a warning or reminder of a potential or imminent hazard
Password Management
Generate and store passwords in an encrypted database and assist in retrieving lost or forgotten passwords
Access Management
Control and manage access to company resources
Data Classification
Grouping log entries based on similar attributes.
Access Control
Regulate who can view information within the system
Incident Response Checklists
Checklist to confirm the incident and response.
Active Directory Integration
Integrates with Active Directory
Multi-Factor Authentication
Request two or more credentials to prove user's identity before granting access to systems
Search/Filter
Search and filter data across systems to locate required information by entering keywords or certain criteria
Real-time Alerts
Receive notification of issues as soon as they occur
Remediation Management
Identify and orchestrate execution of actions needed to restore systems to optimal conditions
Risk-Based Authentication
Determine the risk profile of a user requesting access before granting access
Configuration Management
Identify component attributes like servers, hardware, software, and manage relationships across all services
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Prioritization
Arrange tasks based on the level of priority or urgency
Deception Management
Deploy realistic decoys that lure away from real assets within a given network
Root Cause Analysis
Identify and analyse the reasons behind accidents
Identity Verification
Validating the identity of an individual or entity through verification of personal information or credentials
Access Certification
Verify user access rights within systems to confirm each user has appropriate and authorized access to resources
Behavioral Analytics
Track and analyse user behavior within a system or network