Truzta Features
Administration (10)
API
Application programming interface that allows for integration with other systems/databases
Extensibility
Provides the ability to extend the platform to include additional features and functionalities
Reporting and Analytics
Tools to visualize and analyze data.
Risk-scoring
Calculates risk based on user behavior, baselines, and improvements.
Customization
Customizable solution so administers can adjust content to industry, position, etc.
White-Labeling
Allows users to implement their own branding throughout the platform.
Reporting
Provides analytics tools that reveal important business metrics and track progress.
AI-generated Content
Uses generative AI to create training scenarios, deepfake simulations, or tailored modules.
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Interactive Content
Allow the audience to interact or engage with the content
Analysis (6)
Issue Tracking
Track issues and manage resolutions.
Reconnaissance
Gathers information about the system and potential exploits to be tested.
Vulnerability Scan
Scans applications and networks for known vulnerabilities, holes and exploits.
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Automatic Scans
Setup recurring or automatic scans
SPA Scans
Security assessments specifically designed to identify vulnerabilities in single-page web applications.
Testing (4)
Command-Line Tools
Allows users to access a terminal host system and input command sequences.
Manual Testing
Allows users to perfrom hands-on live simulations and penetration tests.
Test Automation
Runs pre-scripted security tests without requiring manual work.
Performance and Reliability
Software is consistently available (uptime) and allows users to complete tasks quickly because they are not waiting for the software to respond to an action they took.
Assessment (4)
Continuous Assessment
The abillity to automate assessment or have assesments scheduled and delivered continuously.
Phishing Assessment
Sends users phishing emails, voicemails, messages through SMS, Slack, Teams, etc. to test user's threat-identification abilities.
Baselining
Assess current state of user security training, prior to training, which can be used to track performance and improvement.
Risk Assessment
Initiate collection and analysis of known risks
Training (3)
Content Library
Provides users with a pre-built library of useable security-related informational content.
Interactive Training
Engages users through content in the form of interactive applications, games, and modules.
Gamification
Contains gamification tools, including but not limited to badges, leaderboards, and point scoring.
Configuration (5)
DLP Configuration
Offers data loss prevention tools to protect data from leaving the environments it is allowed to.
Configuration Monitoring
Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.
Unified Policy Management
Allows users to track and control security policies across cloud services and providers.
Adaptive Access Control
Provides a risk-based approach to determining trust within the network.
API / Integrations
Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.
Visibility (2)
Multicloud Visibility
Provides all-encompassing display and analysis of environments, resources, traffic, and activity across networks.
Asset Discovery
Detect new assets as they enter a cloud environments and networks to add to asset inventory.
Vulnerability Management (4)
Threat Hunting
Facilitates the proactive search for emerging threats as they target servers, endpoints, and networks.
Vulnerability Scanning
Analyzes your existing cloud, network, and IT infrastructure to outline access points that can be easily compromised.
Vulnerability Intelligence
Stores information related to new and common vulnerabilities and how to resolve them once incidents occur.
Risk-Prioritization
Allows for vulnerability ranking by customized risk and threat priorities.
Monitoring (9)
Gap Analysis
Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.
Vulnerability Intelligence
Stores information related to common vulnerabilities and how to resolve them once incidents occur.
Compliance Monitoring
Monitors data quality and sends alerts based on violations or misuse.
Continuous Monitoring
Aggregates real-time updates and historical data from multiplate internal and external data sources to support ongoing proactive threat response.
Server Monitoring
Continuously scan servers on a designated network to monitor health and search for any irregularities or failures
Real-Time Monitoring
Active monitoring of systems, applications, or networks
Vendor Performance
Track vendor performance using supplier data such as a history of transactions and contracts.
Notifications
Send alerts and notifications when corrective actions are needed to address supplier risk.
Oversight
Perform ongoing due diligence activities to auto calculate overall risk for each vendor.
Asset Management (4)
Asset Discovery
Detects new assets as they enter cloud environments and networks to add to asset inventory.
Shadow IT Detection
Identifies unsanctioned software.
Change Management
Provides tools to track and implement required security policy changes.
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Risk Management (4)
Risk-Prioritization
Allows for vulnerability ranking by customized risk and threat priorities.
Reconnaissance
Gathers information about the system and potential exploits to be tested.
At-Risk Analysis
Uses machine learning to identify at-risk data.
Threat Intelligence
Stores information related to common threats and how to resolve them once incidents occur.
Risk Assessment (2)
Scoring
Users can assign scores to suppliers based on the estimated risk of doing business with them.
AI
Utilize artificial intelligence to analyze third party risks.
Risk Control (3)
Reviews
Review vendor contracts and profiles to ensure compliance with regulation and internal policies.
Policies
Manage and enforce internal policies related to vendor risk management and controls.
Workflows
Provide workflows to mitigate risk and escalate issues proactively.
Reporting (3)
Templates
Include reporting templates for activities such as audits and vendor evaluation.
Centralized Data
Consolidate data from multiple systems that manage supplier information.
360 View
Provide a 360 view of suppliers which can be shared with internal or external users.
Generative AI (1)
AI Text Summarization
Condenses long documents or text into a brief summary.
Vulnerability Management - Digital Risk Protection (DRP) Platforms (6)
Vulnerability Assessment
Incorporates real-time data from various sources to identify potential threats and vulnerabilities.
Digital Footprint Mapping
Creates a digital footprint of an organization's ecosystem to identify exposed digital assets.
Fraud Detection
Identifies and mitigates fraudulent websites, phishing attacks, and other social engineering attacks targeting employees and customers.
Data Leak Detection
Detects sensitive data published on the dark web and other paste sites.
Anti-Counterfeiting
Protects against illegal online sales and counterfeiting.
Brand Protection
Analyzes an organization’s online presence to identify instances of brand impersonation.
Incident Response Digital Risk Protection (DRP) Platforms (3)
Threat Remediation
Outlines clear takedown processes for threats.
Automated Reponses
Implements automated responses to certain types of incidents.
Incident Response Capabilities
Provides resources for a coordinated and efficient response to security incidents, facilitating investigation, containment, and recovery efforts.
Reporting and Analytics - Digital Risk Protection (DRP) Platforms (3)
Threat Trends Analysis
Offers analytics features to provide insights into digital risk trends and the effectiveness of mitigation strategies
Risk Assessment Reports
Generates reports that assess the overall digital risk posture of an organization. Reports may include an analysis of the identified threats and vulnerabilities.
Customizable Dashboards
Offers dashboards that can be customized based on the key performance indicators of an organization.
Generative AI - Security Compliance (2)
-
Predictive Risk
Can analyze patterns and trends in security data to predict potential compliance risks.
-
Automated Documentation
Can automate the creation of compliance documentation by quickly generating accurate and comprehensive reports.
Agentic AI - Third Party & Supplier Risk Management (2)
Adaptive Learning
Improves performance based on feedback and experience
Decision Making
Makes informed choices based on available data and objectives
Additional Functionality (135)
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Assessment Management
Creation, administration, and evaluation of assessments or tests
Learning Management
Organize and track educational activities
Document Automation
Automated or logic-based workflows that assist in the creation of electronic documents
Policy Management
Create, manage, and track policies and procedures within an organization
Dashboard
Assembly of graphs and charts for visualizing and tracking statistics/metrics
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Training Management
Track employee/learner's progression through training programs
Simulated Threat Attacks
Controlled, realistic exercises that mimic real cyber threats to test an organization/user's security measures and preparedness.
Self-Paced Courses
Data Visualization
Graphical representation of data
Risk Analysis
Analyze potential risks across the organization
Progress Tracking
Reporting on how each user, task or process has advanced since its initiation
Threat Intelligence
Information to prevent, understand and identify cyber threats
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Regulatory Compliance
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Surveys & Feedback
Gauge satisfaction and receive information for improvement and success
Customizable Reports
Alter the layout and content of reports
Compliance Tracking
Track and report regulatory data to either internal management or external stakeholders
Interactive Learning
Students are encouraged to interact with technology-enabled study materials during the course of learning
Interactive Reports
Edit and personalize data view as needed
Goal Setting/Tracking
Establish measurable goals and objectives and track their progress over a specific period of time
Self-paced Learning
Identifying your own learning needs, setting goals, finding the necessary resources, and evaluating your own knowledge
SSL Security
Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
API
Application programming interface that allows for integration with other systems/databases
Threat Response
Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
Endpoint Protection
Protect users working remotely and provide secure environments for personal devices to access company programs
Maintenance Scheduling
Schedule predetermined or ad hoc maintenance services and labor requests
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
Application Security
Identify and respond to security threats to developed applications
Encryption
Convert data into a code for security
Network Security
Prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources
Real-Time Reporting
Active reporting of data and metrics
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Authentication
Verify the identity of users/devices to enable secure access
Financial Data Protection
Anti Virus
Prevents, detects and removes malware
Secure Data Storage
Securely stores data to prevent data loss or breaches
Virus Definition Update
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
VPN
Extend virtual private network over public networks to enable protected information exchange
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Anti Spam
Techniques to prevent and filter unwanted or unsolicited email spam from reaching a user's inbox
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Data Visualization
Graphical representation of data
Alerts/Escalation
System alerts about the need to escalate an issue or request
Data Security
Protect sensitive data for digital privacy
Network Mapping
Network topology maps providing infrastructure visualization for devices, connections, configurations, etc.
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
SQL Injections
Protect against code driven website security attack techniques
Audit Management
Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws
Threat Intelligence
Information to prevent, understand and identify cyber threats
Assignment Management
Assign issues and tasks based on availability or required skills
Integration Management
Identify which applications need to exchange data and enable these data connections
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Asset Discovery
Remediation Management
Identify and orchestrate execution of actions needed to restore systems to optimal conditions
Vulnerability Scanning
Discover patch statuses and vulnerabilities
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Multi-User Collaboration
Two-way actions and communication between multiple users in real time
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Web-Application Security
Identify and respond to security threats to web applications
Vulnerability Assessment
The process of identifying, quantifying, and prioritizing the vulnerabilities in a system.
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
Runtime Container Security
Continuously vetting activities within the container application environment including hosts, open ports, protocols and payloads.
Network Scanning
Scanning networks to identify security threats
Password Cracking
Tools for testing the strength of passwords through brute force, dictionary attacks, or other methods.
Simulated Threat Attacks
Controlled, realistic exercises that mimic real cyber threats to test an organization/user's security measures and preparedness.
Certificates
Create and distribute custom certificates for achievements or assessments.
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Real-Time Data
Receive data and information in real time
Cross-Site Scripting
Security vulnerability that allows attackers to inject malicious scripts into web pages
Exploit Frameworks
Specialized tools and modules to exploit identified vulnerabilities in systems and applications.
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
Workflow Management
Create, design and manage workflows for repetitive tasks
Secure Data Storage
Securely stores data to prevent data loss or breaches
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Consent Management
Manage user consent requests and documents
Data Mapping
Track the management and flow of data throughout the organization
Audit Management
Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws
API
Application programming interface that allows for integration with other systems/databases
Role-Based Permissions
Set & manage permission levels based on user roles and restrict access to only authorized individuals
Policy Management
Create, manage, and track policies and procedures within an organization
Single Sign On
Allow users to access multiple services after entering their login credentials once
Risk Management
Process of identifying, evaluating, mitigating, addressing and reporting on potential risks or uncertainties
Search/Filter
Search and filter data across systems to locate required information by entering keywords or certain criteria
Template Management
Create, save, and re-purpose templates for emails, forms, etc.
Multi-Language
Manage and support multiple languages
Data Visualization
Graphical representation of data
User Management
Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks
Monitoring
Observe and track the demand, usage, progress or quality of a system, product, or user
PIA/DPIA
Data impact assessments to identify and mitigate potential data risks
Alerts/Notifications
Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges
Sensitive Data Identification
Identify sensitive or personal information collected from users
Self Service Portal
Online portal through which end users can access the system, manage tasks, or obtain information
Archiving & Retention
Moving and separately storing data that is not actively used or continuous storage of data for compliance purposes
Data Import/Export
Import and export data to and from software applications
Risk Assessment
Initiate collection and analysis of known risks
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
Document Management
Store, manage, and track all electronic documents in a centralized location
PCI Compliance
Store, process, and transmit cardholder data in compliance with the Payment Card Industry Data Security Standard (PCI DSS)
Incident Management
Manage and track all disruptions and incidents
Data Governance
Collection of processes, policies, and standards to manage the storage & usability of enterprise data
Compliance Management
Track and manage adherence to policies for any service, product, process, or supplier
Customizable Templates
Pre-designed layouts that can be customized to match preferences and requirements
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Reporting & Statistics
Collection, analysis, and representation of numerical data and generation of reports to understand various patterns
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Data Storage Management
Manage and store data in a database
File Management
Create, save, and store files
Customizable Reports
Alter the layout and content of reports
Performance Metrics
A set of indicators that tracks the performance of networks, applications, systems, teams, etc.
Risk Analysis
Analyze potential risks across the organization
Intrusion Detection System
Identify and alert about security breaches by third parties
Log Analysis
Analyzing computer-generated records called logs to identify the root cause of errors, bugs, security threats, or other risks
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
Log Management
Collects and aggregates data from various systems within the IT environment
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Risk Alerts
Notifying as a warning or reminder of a potential or imminent hazard
PCI Assessment
Conducting audits to ensure compliance with the Payment Card Industry Data Security Standard (PCI DSS).
Vulnerability Scanning
Discover patch statuses and vulnerabilities
Event Logs
A chronological record of actions or occurrences within a network, software, or process
File Integrity Monitoring
Validating the integrity of an operating system, application, and files by monitoring for probable changes, tempering, or fraud.
Exceptions Management
Automated handling of non-compliant EDI transmissions.
Data Synchronization
Synchronizing data between two or more devices/systems and automatically updating changes to maintain consistency
Compliance Tracking
Track and report regulatory data to either internal management or external stakeholders
Activity Monitoring
Track and report on everything that happens within the system or network
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Secure Login
At least a username and password is required to access the system