Todyl Security Platform Features

Network Management (7)

Activity Monitoring: Documents the actions from endpoints within a network. Alerts users of incidents and abnormal activities and documents the access point.
Asset Management: Keeps records of each network asset and its activity. Discovers new assets accessing the network.
Log Management: Provides security information and stores the data in a secure repository for reference.
Network Segmentation: Allows administrative control over network components, mapping, and segmentation.
Network Mapping: Allows visual display of networks segmented components and their connected resources.
Security Analytics: Utilizes behavioral analysis to improve security procedures and documentation.
API/Integrations: Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.

Incident Management (3)

Event Management: Alerts users of incidents and allows users to intervene manually or triggers an automated response.
Automated Response: Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Incident Reporting: Documents cases of abnormal activity and compromised systems.

Security Intelligence (4)

Threat Intelligence: Stores information related to common threats and how to resolve them once incidents occur.
Vulnerability Assessment: Analyzes your existing network and IT infrastructure to outline access points that can be easily compromised.
Advanced Analytics: Allows users to customize analytics with granulized metrics that are pertinent to your specific resources.
Data Examination: Allows users to search databases and incident logs to gain insights on vulnerabilities and incidents.

Security (8)

Security Automation: Allows administrative control over automated security tasks.
Application Security: Protects application access and data. Prompts additional authentication for suspicious users.
Workload Protection: Protects computing resources across a network. Prompts additional authentication for suspicious users.
Data Protection: Protects informatin stored on premises and in the cloud. Prompts additional authentication for suspicious users.
Governance: Allows users to create, edit, and relinquish user access privileges.
Data loss Prevention: Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest.
Data Encryption/Security: Manages policies for user data access and data encryption.
Access Control: Supports LDAP Protocol to enable access control and governance.

Identity Management (3)

Adaptive Access Control: Provides a risk-based approcach to determining trust within the network.
Identity Scoring: Calculates risk based on user behavior, permissions, and requests.
User Monitoring: Monitors users attempting unauthorized access to databases, applicaitons, and othe network components.

Analysis (6)

User Analytics: Allows for reporting and documentation of individual user behavior and privileges.
Cloud Gap Analytics: Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.
Anomoly Detection: Monitors acivity related to user behavior and compares activity to benchmarked patterns.
Automated Remediation: Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Incident Reports: Produces reports detailing trends and vulnerabilities related to their network and infrastructure.
Behavioral Analysis: Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns and fraud indicators.

Functionality (7)

SSO: Provides a single access point for users to access multiple cloud products without multiple logins.
Cloud Registry: Details SaaS products the cloud security product can integrate with and provide security for.
Mobile Device Mangement: Offers the ability to set standards for types of mobile devices and networks capable of accessing data.
System Isolation: Cuts off network connection or temporarily inactivate applications until incidents are remedied.
Firewall: Protects endpoint devices from a variety of attacks and malware threats.
Endpoint Intelligence: Analysis for users to examine threat intelligence data specific to their endpoint devices.
Malware Detection: Provides multiple techniques and information sources to alert users of malware occurrences.

Administration (5)

Compliance: Monitors assets and enforces security policies to audit assets and infrastructure security.
Web Control: Filters websites and manages whitelisting to enforce compliance protocols for users accessing the internet within the network.
Application Control: Blocks endpoint users from accessing restricted applications.
Asset Management: Keeps records of each network asset and its activity. Discovers new assets accessing the network.
Device Control: Manages user network accessibility on laptops and mobile devices.

Detection & Response (4)

Response Automation: Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Threat Hunting: Facilitates the proactive search for emerging threats as they target servers, endpoints, and networks.
Rule-Based Detection: Allows administrators to set rules specified to detect issues related to issues such as sensitive data misuse, system misconfiguration, lateral movement, and/or non-compliance.
Real-Time Detection: Constantly monitors system to detect anomalies in real time.

Management (7)

Extensibility: Allows for customized support for hybrid environments
Workflow Automation: Streamline the flow of work processes by establishing triggers and alerts that notify and route information to the appropriate people when their action is required within the compensation process.
Unified Visibility: Provides all-encompassing display and analysis of environments, resources, traffic, and activity across networks.
Multicloud Management: Allows users to track and control cloud spend across cloud services and providers.
DLP Configuration: Offers data loss prevention tools to protect data from leaving the environments it is allowed to.
Dynamic Scaling: Scale resources automatically, adjusting for usage demands.
Policy Enforcement: Enables administrators to create access policies and applies policy controls throughout request and provisioning processes

Analytics (3)

Threat Intelligence: Stores information related to common threats and how to resolve them once incidents occur.
Artificial Intelligence & Machine Learning: Facilitates Artificial Intelligence (AI) such as Machine Learning (ML) to enable data ingestion, performance suggestions, and traffic analysis.
Data Collection: Collects information from multiple sources to cross reference and build contextual to correlate intelligence.

Monitoring (3)

Data Center Networking: Provides advanced data center network services to deliver multiple high-speed IP.
Multicloud Visibility: Allows users to track and control activity across cloud services and providers.
Anomaly Detection: Constantly monitors system to detect anomalies in real time.

Protection (4)

Firewall-as-a-Service: Managed, cloud-delivered firewall that protects devices, assets, networks, and other cloud services from web-based threats.
Cloud Application Brokerage: Provides a single access point for users to access multiple cloud applications, services, and products through a central gateway
Web Gateway: Provides a private web gateway for secure internet browsing.
Adaptive Access Control: Provides a risk-based approach to determining trust within the network.

Platform Features (7)

24/7 support: Provides 24/7 support to customers with technical questions.
Proactive report alerts: Proactively sends reports or alerts to customers.
Application control: Lets users detect and block applications that are not a security threat.
Proactive threat hunting: Proactively hunts threats.
Rapid response time: Provides rapid reponse time to cyber threats.
Customizeable reports: Provides the ability to customize reports.
Managed Services: Offers MDR as a service.

Automation Capabilities (3)

Web Content and Traffic Filtering - Secure Web Gateways (5)

SSL/TLS Inspection: Decrypts and inspects encrypted web traffic to detect and block threats hidden within encrypted connections.
Content Filtering: Analyzes web content to filter out malicious code, malware, and inappropriate material.
URL Filtering: Blocks access to known malicious or unauthorized websites based on predefined policies.
Real-Time Traffic Inspection: Inspects and analyzes inbound and outbound web traffic in real-time for threats and compliance.
Ad and Tracker Blocking: Blocks ads and trackers to enhance user privacy and reduce exposure to potential threats.

Data Protection and Loss Prevention - Secure Web Gateways (4)

Data Loss Prevention (DLP): Monitors outgoing web traffic to prevent sensitive data from being leaked or exfiltrated.
Phishing Protection: Detects and blocks phishing attempts to protect users from fraudulent websites and email links.
Malware Protection: Uses signature-based scanning, heuristic analysis, and sandboxing to detect and block malware threats.
Cloud Access Security: Monitors and controls access to cloud applications and services to prevent unauthorized use and data leakage.

Access Control and Authentication - Secure Web Gateways (3)

Application Control: Regulates access to web-based applications and services as per organizational policies.
Authentication and Access Control: Verifies users' identities and enforces access control policies to ensure only authorized users can access permitted web resources.
User and Group Policies: Supports the creation of policies based on user roles, groups, or other attributes for more granular control.

Performance and Management - Secure Web Gateways (5)

Customizable Policy Enforcement: Allows organizations to create and enforce custom web usage policies tailored to their specific needs.
Bandwidth Management: Prioritizes and allocates network resources based on predefined policies to optimize performance.
Integration Capabilities: Integrates with other security tools and systems, such as firewalls, SIEMs, and endpoint security solutions.
Reporting and Logging: Provides comprehensive reports and logs of web activity, including sites visited, user activity, security events, and policy violations.
Threat Intelligence Integration: Leverages threat intelligence feeds to stay updated on the latest threats and enhance protection.

Generative AI - Security Compliance (2)

Components - Secure Access Service Edge (SASE) (5)

Zero Trust Network Access (ZTNA): Enforces zero trust access rules.
Wide Area Network (WAN): Integrates wide area network (WAN) capabilities, such as SD-WAN.
Cloud Access Security Broker (CASB): Enforces security requirements and secures connections with cloud resources.
Secure Web Gateway (SWG): Prevents unauthorized web domains from entering a network and protects against web-based threats.
Firewall as a Service: Provides cloud-based firewall protection.