Risk Exposure Analyzer™

Skybox Risk Exposure Analyzer™ creates a detailed visual representation of the network and potential risks to help IT security and compliance managers resolve critical issues. The solution allows users to predict potential attack scenarios on their IT networks using a sophisticated evaluation of network topology, vulnerabilities, device configurations, and potential threats.

Prioritize Vulnerabilities

Risk Exposure Analyzer provides security analysts with the ability to quantify, prioritize, and compare the overwhelming number of vulnerabilities in the network -- highlighting the most critical vulnerabilities so they can be remediated quickly. The solution also enables the assessment of risk metrics and trends for the organization overall as well as drilling down to the business asset level.

Simulate Attack Scenarios

As cyber criminals become more sophisticated, organizations must improve their ability to anticipate and prevent potential attack scenarios. With Risk Exposure Analyzer, users can simulate cyber-attack scenarios and use the information to modify those areas that are most vulnerable to a security breach.

Generate PCI DSS Reports

Risk Exposure Analyzer quickly generates PCI compliance reports that follow the PCI DSS v1.2 requirements 6.1 and 6.2. The organization can significantly reduce the time formerly dedicated to patching and reaching compliance. The reports provide proof to auditors that compensating controls (such as firewalls and intrusion prevention systems)

sufficiently mitigate exploitation of vulnerabilities.

Key Benefits

• Prioritize action plans for optimal remediation - focusing on the 1-2% exposures that really matter
• Demonstrate effectiveness of compensating controls (such as firewalls and intrusion prevention systems) for compliance reporting
• Improve IT security by shrinking the window of exposure from months to hours
• Reduce ineffective patch or mitigation projects
• Increase visibility through and accurate and continuous risk assessment process

Additional Solutions

Threat Alert Manager - Threat correlation, threat life cycle workflow

Manages the life-cycle and workflow of threat alerts. Correlates and analyzes threat alert feeds, patch history, vulnerability and asset data for informed threat mitigation decisions.

Security Profile Advisor - Vulnerability and patch management dashboard

Provides a governance dashboard for vulnerability and patch management programs, leveraging any number of vulnerability scanners, asset management, and patch management systems.