Find a Partner
Please choose a category below to view a list of our partners.
IT Governance, Risk and Compliance (IT GRC)
RSA's Archer SmartSuite GRC is the industry's most powerful enterprise governance, risk and compliance (eGRC) ecosystem-one that brings together people, processes and technologies to enable best-in-class GRC programs on a global scale. Widely recognized as the industry-leading solution in eGRC, the Archer SmartSuite Framework is leveraged by more than six million licensed users and a client list that includes one in four of the Fortune 100. In January 2010 RSA, The Security Division of EMC, acquired Archer Technologies. The Archer supports the Archer Exchange, an online marketplace dedicated to supporting eGRC initiatives. Through the Exchange, clients have direct access to third-party application, service, content and integration providers who can help them manage complex business processes through the Archer SmartSuite Framework. Exchange providers represent top-tier companies with deep industry knowledge in the areas of business enablement, risk and compliance management and IT services. In April 2010, RSA's Archer SmartSuite received the highest rating of "Strong Positive" in the Gartner MarketScope for IT governance, risk and compliance management. Archer operations are centralized in Overland Park, Kansas. RSA corporate headquarters are in Bedford, Massachusetts.
Archer Technologies / RSA Integration Summary
The integration of Rapid7 Nexpose® with RSA's Archer SmartSuite GRC framework provides customers with direct access to the Nexpose® vulnerability management data within the SmartSuite GRC system for IT GRC reporting. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive scan results are then automatically imported into Archer SmartSuite Vulnerability Scan Results application. Customers can then assign ownership to the individual issues, track remediation efforts, and manage business risk. Customers may integrate with other solutions such as Archer's Asset Management and Threat Management to gain a broader understanding of their risk. Archer also supports both the HITRUST Common Security Framework (CSF), and the Unified Compliance Framework (UCF), allowing Nexpose data to be applied towards compliance reports built in Archer for such regulations as SOX, HIPAA, and the Massachusetts Data Privacy Law (MA 201 CMR 17). Additional information on the Rapid7 Nexpose-RSA Archer integration is available from Archer through the Archer Exchange.
- (408) 200-0400
- www.agiliance.com
- sales@agiliance.com
Agiliance Profile
Agiliance is the leading independent provider of enterprise Governance, Risk and Compliance (GRC) solutions. Agiliance enables organizations to manage their IT and operational risks in real time more effectively, while reducing the cost of meeting compliance mandates. Agiliance RiskVision™ is a fully integrated suite of GRC solutions, delivered on a purpose-built GRC technology platform and offers an agile, modular approach to deploying GRC so that customers can meet their specific GRC requirements. RiskVision includes six key GRC applications: Policy, Compliance, Enterprise Risk, and Vendor Risk. Threat and Vulnerability, and Incident. RiskVision has received the highest rating of "Strong Positive" in the Gartner MarketScope for IT governance, risk and compliance management two years in a row. Agiliance is based in San Jose, California.
Agiliance Integration Summary
The integration of Rapid7 Nexpose® with Agiliance RiskVision provides customers with direct access to Nexpose® vulnerability management data within the RiskVision GRC for IT GRC reporting. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive scan results are then automatically imported by the Agiliance Rapid7 Web Services Connector into the RiskVision Threat and Vulnerability Manager.
Implemented as a plug-in to the Agiliance Web Services client, the Rapid7 connector imports data from Nexpose on discovered assets and vulnerabilities, which can then be applied to the Agiliance Organization Hierarchy, enabling customers to leverage both asset and vulnerability data for use in assessments, reporting and risk management to gain a broader understanding of their business risk. Additional information on the Rapid7 Nexpose-Agiliance RiskVision integration is available from Agiliance.
- (512)-372-1004
- www.brinqa.com
- sales@brinqa.com
Brinqa Profile
Brinqa provides enterprises and government agencies with governance, risk management, and compliance solutions that enable the continuous improvement of operational and regulatory efficiencies. Brinqa’s offering is the most comprehensive available on the market today, based on our forward-thinking vision of a centralized, fully automated, and re-usable governance, risk and compliance platform combined with targeted applications to meet program specific GRC needs.
Brinqa Integration Summary
The integration of Brinqa Risk Manager, Rapid7 Metasploit and Rapid7 Nexpose will provide direct access to penetration-testing results and vulnerability data from within a centralized risk management platform and will enhance insight into application risk across your enterprise. The solution captures and coordinates unique intelligence on the highest-risk vulnerabilities and then factors it into Brinqa’s risk modeling process to provide an in depth analysis of a company’s risk posture. Remediation of these high-risk vulnerabilities identified by Rapid7, will be managed within Brinqa’s closed loop issue and action tracking process. This information is then incorporated into Brinqa’s executive level dashboards and reports to communicate the evidence necessary to support investments in managing risks and preventing the data breaches with the largest potential business and operational impacts.
Modulo Integration Summary
Modulo Risk Manager integrates Nexpose Vulnerability Management to deliver comprehensive security risk and compliance management capabilities to global customers.
Modulo Risk Manager provides a comprehensive solution for governance, risk and compliance. Through the integration, customers can better manage their organization's risks by proactively identifying, tracking, reporting, and managing risks in automated way. The vulnerabilities identified by Nexpose scans can be viewed, analyzed, evaluated and treated on Modulo Risk Manager. By bringing the vulnerabilities from Nexpose, we provide organizations with the tools they need to manage risks more efficiently.
The integration allows Modulo's users to better manage their risk by automating the gathering of security and compliance data from global assets. The Modulo Risk Manager software automatically receives vulnerabilities and misconfiguration data collected through neXpose. This data is aggregated in the Modulo Risk Manager allowing users to easily view the data, providing better tracking, risk assessment and compliance documentation.
Some key advantages are:
|
|
|
With Nexpose and Modulo Risk Manager risks are clearly identified and organizations are better prepared to manage them. Through the integration, customers can:
Benefits
Prioritized and integrated platform to manage risks Intelligent integrated scanning Reduced operational costs Integration with a GRC Plataform Workflow to remediation
- (866) 663-5802
- www.modulo.com
Modulo Profile
Modulo is a leading global enterprise provider of comprehensive Governance, Risk and Compliance (GRC) management solutions. Modulo's award-winning Risk Manager™ provides over 1,000 world-wide organizations with the tools they need to automate the entire GRC management process to monitor, manage and sustain adherence to policy and regulations while reducing enterprise risk and complexity.
Modulo Integration Summary
Modulo Risk Manager integrates Nexpose Vulnerability Management to deliver comprehensive security risk and compliance management capabilities to global customers.
Modulo Risk Manager provides a comprehensive solution for governance, risk and compliance. Through the integration, customers can better manage their organization's risks by proactively identifying, tracking, reporting, and managing risks in automated way. The vulnerabilities identified by Nexpose scans can be viewed, analyzed, evaluated and treated on Modulo Risk Manager. By bringing the vulnerabilities from Nexpose, we provide organizations with the tools they need to manage risks more efficiently.
The integration allows Modulo's users to better manage their risk by automating the gathering of security and compliance data from global assets. The Modulo Risk Manager software automatically receives vulnerabilities and misconfiguration data collected through neXpose. This data is aggregated in the Modulo Risk Manager allowing users to easily view the data, providing better tracking, risk assessment and compliance documentation.
Some key advantages are:
|
|
|
With Nexpose and Modulo Risk Manager risks are clearly identified and organizations are better prepared to manage them. Through the integration, customers can:
Benefits
Prioritized and integrated platform to manage risks Intelligent integrated scanning Reduced operational costs Integration with a GRC Plataform Workflow to remediation
- (800) 920-RSAM
- www.rsam.com
- sales@rsam.com
Rsam Profile
Rsam's award-winning GRC platform seamlessly integrates business criticality, regulatory assessment data, vulnerabilities and findings to deliver enterprise-wide visibility, oversight and assurance. Our combination of innovative technology, robust content and modular solutions has delivered successful implementations for hundreds of marquee organizations across a variety of vertical industries as well as small-medium enterprises looking for structure and rapid, out-of-the-box deployment. Rsam's modular solutions streamline the governance, risk and compliance process in the areas of: Assessment, Audit, Compliance, Incident Management, Issue & Remediation Tracking, Policy Management, Threat & Vulnerability Management, Risk Inventory and Vendor Risk Management.
- (800) 721 3934
- www.symantec.com
- info@symantec.com
Symantec is a global leader in providing security, storage and systems management solutions to help our customers - from consumers and small businesses to the largest global organizations - secure and manage their information against more risks at more points, more completely and efficiently than any other company. Symantec's unique focus is to eliminate risks to information, technology and processes independent of the device, platform, interaction or location. Symantec Security Information Manager enables organizations to collect, store, and analyze log data as well as monitor and respond to security events to meet IT risk and compliance requirements. It can collect and normalize a broad scope of event data and correlate the impact of incidents based on the criticality to business operations or level of compliance to various mandates. Symantec has operations in more than 40 countries. Symantec is based in Cupertino, California.
Intrusion Prevention Systems (IPS)
- (800) 917-4134
- www.sourcefire.com
Sourcefire Profile
Sourcefire, Inc. (Nasdaq:FIRE), is a world leader in intelligent cybersecurity solutions. Sourcefire is transforming the way Global 2000 organizations and government agencies manage and minimize network security risks. Sourcefire's IPS, Real-time Network Awareness and Real-time Adaptive Security solutions equip customers with an efficient and effective layered security defense - protecting network assets before, during and after an attack. For more information about Sourcefire, please visit www.sourcefire.com.
Network Topology & Risk Analysis
- (913) 948-9570
- www.FireMon.com
- info@FireMon.com
FireMon Profile
FireMon provides enterprises with security management software that gives them deeper visibility and tighter control over their network security infrastructure. Security Manager, Policy Planner, Risk Analyzer and BackBox enable customers to identify network risk, proactively eliminate those vulnerabilities and strengthen security throughout the organization, and reduce the cost of security operations.
RedSeal Networks, Inc. Integration Summary
The integration of Rapid7 Nexpose® with FireMon Risk Analyzer® provides customers with direct access to Nexpose® vulnerability management data within Risk Analyzer for proactive risk analysis and remediation on their networks. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive vulnerability, configuration policy, and asset discovery scan results are then automatically imported into Risk Analyzer.
Risk Analyzer imports data from Nexpose on discovered configuration policies, assets and vulnerabilities. Risk Analyzer then combines the Nexpose vulnerability scan results with the customer's network and security device configurations. These configurations can be manually imported into Risk Analyzer by the customer, or automatically and continuously imported and updated into Risk Analyzer by FireMon Security Manager. Risk Analyzer then identifies gaps in your network where vulnerabilities are exploitable, and graphically highlights the asset that can be compromised, as well as what other assets can be compromised as the attacker pivots from the initial entry point. Risk Analyzer generates a prioritized list of the vulnerabilities that when remediated can reduce the greatest amount of risk with the least amount of effort, and enables customers to virtually apply patches to see the impact of the recommendations on their overall risk posture. Risk Analyzer also supports the concept of scenarios, allowing customers the ability to configure multiple risk scenarios such as partners using a VPN to access ordering systems, geo-political threats wanting to deface corporate web messaging, and internal users direct access to financial data. Risk Analyzer customers can then monitor and track the risk status of these scenarios over time, leveraging this data for use in assessments, reporting and risk management. Additional information on the Rapid7 Nexpose-FireMon Risk Analyzer integration is available from FireMon at www.firemon.com.
RedSeal Networks, Inc. Profile
RedSeal Networks is the world's leading provider of Proactive Security Intelligence solutions. Enterprises worldwide rely on RedSeal for continuous visibility into the overall effectiveness of their IT security infrastructure. This enables organizations to identify their protection gaps and create actionable metrics through performance trending of all defensive systems, security programs and related investments. Founded in 2004 and based in Santa Clara, California, RedSeal has received over $40 million in funding and currently lists more than 200 customers worldwide in commercial, government and non-profit sectors.
RedSeal Networks, Inc. Integration Summary
The integration of Rapid7 Nexpose® with the RedSeal Vulnerability Advisor provides customers with direct access to Nexpose® vulnerability management data within the Vulnerability Advisor for risk analysis reporting. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive vulnerability, configuration policy, and asset discovery scan results are then automatically imported into the RedSeal Vulnerability Advisor.
Implemented as a plug-in, the Rapid7 data collector imports data from Nexpose on discovered configuration policies, assets and vulnerabilities. RedSeal Vulnerability Advisor then combines configurations it gathers on all network devices, including wireless access points, and combines this information with Nexpose vulnerability scan results. It then identifies gaps in your network where vulnerabilities are exposed to untrusted networks and generates a prioritized list of the vulnerabilities that are the greatest business risks so that customers know where to apply coverage to be secure. Customers can then leverage this data for use in assessments, reporting and risk management. Customers can also integrate with other solutions such as the RedSeal® Network Advisor to gain a broader understanding of their risk. Additional information on the Rapid7 Nexpose-RedSeal Vulnerability Advisor integration is available from RedSeal.
- 1-888-316-3933
- www.risk.io
- hello@risk.io
Risk I/O Profile
Risk I/O™, powered by Chicago-based HoneyApps, Inc., is reinventing vulnerability management by simplifying the complexities inherent in securing an organization's assets. Their Software as a Service collapses the critical time elapsed between the detection of a vulnerability and its resolution by automating the vulnerability management process behind the tools. By connecting a number of automated vulnerability scanning solutions with web application, host, network and database vulnerability assessment tools, users can consolidate all organizational security vulnerability information, reporting and management into a single, centralized place. It correlates, normalizes, and presents disparate vulnerability data to users to help make the vulnerability lifecycle more actionable.
Risk I/O Integration Summary
The integration of Risk I/O™ with Nexpose® allows mutual users to connect their Nexpose instance into Risk I/O for advanced vulnerability management. Once connected, each time a security scan is administered in Nexpose, the scan data appears in Risk I/O where it is correlated with other assessment information and automatically prioritized and indexed. Risk I/O then combines this information with other data sources and uses predictive analytics to alert any high priority issues. Risk I/O provides one-click integration with issue tracking and ticketing solutions and then confirms those fixes via automated testing with its bi-directional integration. Built-in metrics, reporting and benchmarks enable businesses to view their data in any way they see fit through the use of tagging, custom fields and meta data.
Security Information & Event Management (SIEM)
ArcSight is a leading global provider of security and compliance management solutions that intelligently identify and mitigate cyber threat and risk for businesses and government agencies. ArcSight helps protect enterprises and government agencies by providing complete visibility and critical insights into their IT infrastructure across all users, networks, datacenters and applications. The market-leading ArcSight platform enables organizations to proactively safeguard their digital assets, control the risks associated with cybertheft, cyberfraud, cyberwarfare and cyberespionage and comply with corporate and regulatory policy.ArcSight is based in Cupertino, California.
ArcSight Integration Summary
The integration of Rapid7 Nexpose ® with the ArcSight SIEM Platform provides customers with direct access to Nexpose ® vulnerability management data within ArcSight SIEM for risk analysis reporting. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive vulnerability, configuration policy, and asset discovery scan results are then automatically imported into the ArcSight SIEM. Implemented as an agent, the ArcSight SmartConnector lets you import events generated by the Rapid7 Nexpose XML File into the ArcSight System from a designated directory in XML Export format. The ArcSight SIEM then parses, normalizes and stores vulnerability data from Nexpose into the ArcSight database to serve as referential information. ArcSight correlates event information it gathers on all network devices, combines this information with Nexpose vulnerability scan results, and then identifies gaps in your network where vulnerabilities exist enabling more targeted investigation of suspicious or unusual network activity in real-time. This insight enables customers to generate a prioritized list of the vulnerabilities that are the greatest business risks so that customers know where to apply coverage to be secure. Customers can then leverage this data for use in assessments, reporting and risk management. Additional information on the SmartConnector™ Configuration for Rapid7 Nexpose is available from ArcSight.
- (877) 905-6661
- www.secureworks.com
- info@secureworks.com
Dell SecureWorks focuses exclusively on security services to protect thousands of customers around the world. Dell Inc. (NASDAQ: DELL) listens to customers and delivers worldwide innovative technology and business solutions they trust and value. Recognized as an industry leader by top analysts, Dell SecureWorks provides world-class information security services to help organizations of all sizes protect their IT assets, comply with regulations and reduce security costs.
- (978) 684-1000
- www.enterasys.com
- info@enterasys.com
Enterasys delivers Secure Networks™ that ensure the confidentiality, integrity and availability of IT services to the business users that rely on them - without sacrificing performance. You don't have to choose whether to deploy security at the edge, around the middle or in the core of the data center - it's built-in everywhere with granular, policy-based visibility and control over individual users and applications. Enterasys is based in Andover, Massachusetts.
Enterasys Integration Summary
The Enterasys Dragon Console is an OEM of the Q1 Labs QRadar SIM/SIEM product. Refer to Q1 Labs QRadar SIM/SIEM for additional information.
- (888) 586-4737
- www.juniper.net
- info@juniper.net
Juniper Networks' high-performance network infrastructure helps businesses create a responsive and trusted environment for accelerating the deployment of services and applications over a single network. With Juniper, businesses can capitalize on opportunities to innovate, grow and strengthen their business and answer the challenge of complicated, legacy networks with high-performance, open, flexible solutions. Juniper Networks is based in Sunnyvale, California.
Juniper Networks Integration Summary
The Juniper Security Threat Response Manager (STRM) is an OEM of the Q1 Labs QRadar SIM/SIEM product. Refer to Q1 Labs QRadar SIM/SIEM for additional information.
- (408) 215-5900
- www.loglogic.com
- info@loglogic.com
LogLogic® is the IT Data Management Company. More than 1,200 customers worldwide entrust their most sensitive IT data to LogLogic's award-winning products. For more information on LogLogic and IT Data Management, visit us on the web at www.loglogic.com or on Twitter or Facebook.
- (303)413-87450
- www.logrhythm.com
- info@logrhythm.com
LogRhythm, a global leader in Log Management and SIEM 2.0, empowers its customers with the visibility and insight and situational awareness needed for cyber threat defense, detection and response, compliance automation and assurance, and operational intelligence. LogRhythm seamlessly integrates log and event management, file integrity monitoring and host activity monitoring in a single SIEM 2.0 platform.
netForensics delivers the most well-engineered security compliance management solutions available today. netForensics (nFX)is renowned for providing powerful, scalable, flexible solutions that help organizations take control of security, operations, and compliance-from real-time threat identification and mitigation to log management and audit readiness. Their patented, award-winning technologies tie together silos of data to obtain a complete, understandable picture of network security and compliance posture. nFX One centralizes huge volumes of data-from the perimeter to the core of the network-delivering the right security information into the right hands at the right time. In this way, nFX One solutions dramatically improve your organization's ability to identify and rapidly respond to threats. Companies can finally gain an effective, proactive approach to protecting critical data and ensuring compliance with regulatory mandates and corporate policies. netForensics is based in Edison, New Jersey.
netForensics, Inc. Integration Summary
The integration of Rapid7 Nexpose® with the netForensics (nFX) SIM One Solution™ provides customers with direct access to Nexpose® vulnerability management data within nFX SIM One for risk analysis reporting. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive vulnerability, configuration policy, and asset discovery scan results are then automatically imported into nFX One. Implemented as an agent, the nFX Scanner Agent for Rapid7 imports the Rapid7 scan files from a designated directory in XML Export format. It is necessary to confirm that nfadmin user(when agent is installed on Linux/Solaris) or Administrator user(when agent is installed on Windows) has read access to this directory and scanner files inside this directory. nFX SIM One then parses, normalizes and stores vulnerability data from Nexpose into the nFX database to serve as referential information. nFX One correlates event information it gathers on all network devices, combines this information with Nexpose vulnerability scan results, and then identifies gaps in your network where vulnerabilities exist enabling more targeted investigation of suspicious or unusual network activity in real-time. This insight enables customers to generate a prioritized list of the vulnerabilities that are the greatest business risks so that customers know where to apply coverage to be secure. Customers can then leverage this data for use in assessments, reporting and risk management. Additional information on the Rapid7 Nexpose-netForensics SIM One Solution is available from netForensics.
- (603)766-8160
- www.nitrosecurity.com
- info@nitrosecurity.com
NitroSecurity develops high-performance security information and event management (SIEM) solutions that protect critical information and infrastructure. NitroSecurity solutions reduce risk exposure and increase network and information availability by removing the scalability and performance limitations of security information management. Utilizing the industry's fastest analytical tools, NitroSecurity identifies, correlates and remediates threats in minutes instead of hours, allowing organizations to quickly mitigate risks to their information and infrastructure.
- (800) 529-3400
- www.novell.com
- info@novell.com
Novell integrates mixed IT environments, allowing people and technology to work as one. Novell Sentinel is a robust, scalable, and mature real-time security information event management (SIEM) system, trusted and proven in some of the world's largest organizations. Novell Sentinel™ is the market-leading security information management and compliance monitoring solution. Delivering unmatched performance and scalability, Sentinel supports the largest, most complex IT environments in a cost-effective manner. Sentinel automates the process of monitoring for policy violations, identifying and responding to violations, and delivering compliance metrics to demonstrate the effectiveness of critical IT controls. The Sentinel Control Center provides a central console for real-time monitoring, event correlation, incident management and reporting. Novell is based in Waltham, Massachusetts.
Novell Integration Summary
The integration of Rapid7 Nexpose® with the Novell Sentinel™ provides customers with direct access to Nexpose® vulnerability management data within Novell Sentinel™ for risk analysis reporting. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive vulnerability, configuration policy, and asset discovery scan results are then automatically imported into the Novell Sentinel. Implemented as a plug-in, the Rapid7 data collector for Sentinel imports, parses, normalizes and stores vulnerability data from Nexpose into the Sentinel database to serve as referential information. Novell Sentinel takes event information it gathers on all network devices, combines this information with Nexpose vulnerability scan results, and then identifies gaps in your network where vulnerabilities exist enabling more targeted investigation of suspicious or unusual network activity in real-time. This insight enables customers to generate a prioritized list of the vulnerabilities that are the greatest business risks so that customers know where to apply coverage to be secure. Customers can then leverage this data for use in assessments, reporting and risk management. Additional information on the Rapid7 Nexpose- Novell Sentinel integration is available from Novell.
- (877) 333-1433
- www.prismmicrosys.com
- sales@prismmicrosys.com
Prism provides easy-to-deploy products for integrated Security Management, Change Management and Intrusion Detection. EventTracker, Prism’s market leading enterprise Security Information and Event Management (SIEM) and Log Management solution enables commercial enterprises and government organizations to increase the security of their environments and reduce risk to their enterprise.
- (781) 250-5800
- www.q1labs.com
- info@q1labs.com
Q1 Labs, an IBM company, is a global provider of high-value, cost-effective next-generation security intelligence products. The company's flagship product, the QRadar Security Intelligence Platform, integrates previously disparate functionsÑincluding SIEM, risk management, log management, network behavior analytics and security event managementÑinto a total security intelligence solution, making it the most intelligent, integrated and automated security intelligence solution available. QRadar provides users with crucial visibility into what is occurring with their networks, data centers, and applications to better protect IT assets and meet regulatory requirements. Q1 Labs is a US based company with headquarters located in Waltham, MA with sales and support offices throughout North America and Europe. The company also has research & development and cus tomer support centers in Belfast, Northern Ireland and in Fredericton, New Brunswick. Q1 Labs was acquired by IBM in October 2011.
Q1 Labs Integration Summary
The integration of Rapid7 Nexpose® with Q1 Labs' QRadar SIEM provides customers with direct access to Nexpose® vulnerability management data within QRadar for risk analysis reporting. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive vulnerability, configuration policy, and asset discovery scan results are then automatically imported into QRadar. The integration of Rapid7 Nexpose® with Q1 Labs' QRadar SIEM integration with Rapid7 allows you to schedule scans to keep your vulnerability assessment data up-to-date.
The VA Configuration tab is used to configure the Rapid7 collector for QRadar, which then imports, parses, normalizes and stores vulnerability data from Nexpose into the NitroView database to serve as referential information. QRadar takes event information it gathers on all network devices, combines this information with Nexpose vulnerability scan results, and then identifies gaps in your network where vulnerabilities exist enabling more targeted investigation of suspicious or unusual network activity in real-time. This insight enables customers to generate a prioritized list of the vulnerabilities that are the greatest business risks so that customers know where to apply coverage to be secure. Customers can then leverage this data for use in assessments, reporting and risk management. Additional information on the Rapid7 Nexpose-Q1 Labs' QRadar integration is available from Q1 Labs.
- (800) 495 1095
- www.rsa.com
- sales@rsa.com
RSA, The Security Division of EMC, is the premier provider of security solutions for business acceleration, helping the world's leading organisations succeed by solving their most complex and sensitive security challenges. RSA's information-centric approach to security guards the integrity and confidentiality of information throughout its lifecycle - no matter where it moves, who accesses it or how it is used.
RSA offers industry-leading solutions in identity assurance & access control, encryption & key management, compliance & security information management and fraud protection. These solutions bring trust to millions of user identities, the transactions that they perform, and the data that is generated. For more information, please visit www.RSA.com and www.EMC.com.
- (866) 530 8100
- www.solarwinds.com
- sales@solarwinds.com
SolarWinds Inc. (NYSE: SWI), a leading provider of powerful and affordable IT management software. SolarWinds Log & Event Manager (formerly TriGeo SIM) can help you declare victory over IT operations, compliance, and security challenges.
- (800) 721 3934
- www.symantec.com
- info@symantec.com
Symantec is a global leader in providing security, storage and systems management solutions to help our customers - from consumers and small businesses to the largest global organizations - secure and manage their information against more risks at more points, more completely and efficiently than any other company. Symantec's unique focus is to eliminate risks to information, technology and processes independent of the device, platform, interaction or location. Symantec Security Information Manager enables organizations to collect, store, and analyze log data as well as monitor and respond to security events to meet IT risk and compliance requirements. It can collect and normalize a broad scope of event data and correlate the impact of incidents based on the criticality to business operations or level of compliance to various mandates. Symantec has operations in more than 40 countries. Symantec is based in Cupertino, California.
Symantec Integration Summary
The integration of Rapid7 Nexpose® with the Symantec Security Information Manager (SIM) provides customers with direct access to Nexpose® vulnerability management data within the Symantec SIM for risk analysis reporting. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive vulnerability, configuration policy, and asset discovery scan results are then automatically imported into the Symantec SIM. Implemented as an agent and Collector, the Rapid7 data collector for Symantec SIM imports, parses, normalizes and stores vulnerability data from Nexpose in the Symantec SIM database to serve as referential information. The Symantec SIM takes event information it gathers on all network devices, combines this information with Nexpose vulnerability scan results in order to identify gaps in your network where vulnerabilities exist enabling more targeted investigation of suspicious or unusual network activity in real-time. This insight enables customers to generate a prioritized list of the vulnerabilities that are the greatest business risks so that customers know where to apply coverage to be secure. Customers can then leverage this data for use in assessments, reporting and risk management. Additional information on the Rapid7 Nexpose-Symantec SIM integration is available from Rapid7.
Technology Alliance
IT Governance, Risk and Compliance (IT GRC)
RSA's Archer SmartSuite GRC is the industry's most powerful enterprise governance, risk and compliance (eGRC) ecosystem-one that brings together people, processes and technologies to enable best-in-class GRC programs on a global scale. Widely recognized as the industry-leading solution in eGRC, the Archer SmartSuite Framework is leveraged by more than six million licensed users and a client list that includes one in four of the Fortune 100. In January 2010 RSA, The Security Division of EMC, acquired Archer Technologies. The Archer supports the Archer Exchange, an online marketplace dedicated to supporting eGRC initiatives. Through the Exchange, clients have direct access to third-party application, service, content and integration providers who can help them manage complex business processes through the Archer SmartSuite Framework. Exchange providers represent top-tier companies with deep industry knowledge in the areas of business enablement, risk and compliance management and IT services. In April 2010, RSA's Archer SmartSuite received the highest rating of "Strong Positive" in the Gartner MarketScope for IT governance, risk and compliance management. Archer operations are centralized in Overland Park, Kansas. RSA corporate headquarters are in Bedford, Massachusetts.
Archer Technologies / RSA Integration Summary
The integration of Rapid7 Nexpose® with RSA's Archer SmartSuite GRC framework provides customers with direct access to the Nexpose® vulnerability management data within the SmartSuite GRC system for IT GRC reporting. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive scan results are then automatically imported into Archer SmartSuite Vulnerability Scan Results application. Customers can then assign ownership to the individual issues, track remediation efforts, and manage business risk. Customers may integrate with other solutions such as Archer's Asset Management and Threat Management to gain a broader understanding of their risk. Archer also supports both the HITRUST Common Security Framework (CSF), and the Unified Compliance Framework (UCF), allowing Nexpose data to be applied towards compliance reports built in Archer for such regulations as SOX, HIPAA, and the Massachusetts Data Privacy Law (MA 201 CMR 17). Additional information on the Rapid7 Nexpose-RSA Archer integration is available from Archer through the Archer Exchange.
- (408) 200-0400
- www.agiliance.com
- sales@agiliance.com
Agiliance Profile
Agiliance is the leading independent provider of enterprise Governance, Risk and Compliance (GRC) solutions. Agiliance enables organizations to manage their IT and operational risks in real time more effectively, while reducing the cost of meeting compliance mandates. Agiliance RiskVision™ is a fully integrated suite of GRC solutions, delivered on a purpose-built GRC technology platform and offers an agile, modular approach to deploying GRC so that customers can meet their specific GRC requirements. RiskVision includes six key GRC applications: Policy, Compliance, Enterprise Risk, and Vendor Risk. Threat and Vulnerability, and Incident. RiskVision has received the highest rating of "Strong Positive" in the Gartner MarketScope for IT governance, risk and compliance management two years in a row. Agiliance is based in San Jose, California.
Agiliance Integration Summary
The integration of Rapid7 Nexpose® with Agiliance RiskVision provides customers with direct access to Nexpose® vulnerability management data within the RiskVision GRC for IT GRC reporting. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive scan results are then automatically imported by the Agiliance Rapid7 Web Services Connector into the RiskVision Threat and Vulnerability Manager.
Implemented as a plug-in to the Agiliance Web Services client, the Rapid7 connector imports data from Nexpose on discovered assets and vulnerabilities, which can then be applied to the Agiliance Organization Hierarchy, enabling customers to leverage both asset and vulnerability data for use in assessments, reporting and risk management to gain a broader understanding of their business risk. Additional information on the Rapid7 Nexpose-Agiliance RiskVision integration is available from Agiliance.
- (512)-372-1004
- www.brinqa.com
- sales@brinqa.com
Brinqa Profile
Brinqa provides enterprises and government agencies with governance, risk management, and compliance solutions that enable the continuous improvement of operational and regulatory efficiencies. Brinqa’s offering is the most comprehensive available on the market today, based on our forward-thinking vision of a centralized, fully automated, and re-usable governance, risk and compliance platform combined with targeted applications to meet program specific GRC needs.
Brinqa Integration Summary
The integration of Brinqa Risk Manager, Rapid7 Metasploit and Rapid7 Nexpose will provide direct access to penetration-testing results and vulnerability data from within a centralized risk management platform and will enhance insight into application risk across your enterprise. The solution captures and coordinates unique intelligence on the highest-risk vulnerabilities and then factors it into Brinqa’s risk modeling process to provide an in depth analysis of a company’s risk posture. Remediation of these high-risk vulnerabilities identified by Rapid7, will be managed within Brinqa’s closed loop issue and action tracking process. This information is then incorporated into Brinqa’s executive level dashboards and reports to communicate the evidence necessary to support investments in managing risks and preventing the data breaches with the largest potential business and operational impacts.
Modulo Integration Summary
Modulo Risk Manager integrates Nexpose Vulnerability Management to deliver comprehensive security risk and compliance management capabilities to global customers.
Modulo Risk Manager provides a comprehensive solution for governance, risk and compliance. Through the integration, customers can better manage their organization's risks by proactively identifying, tracking, reporting, and managing risks in automated way. The vulnerabilities identified by Nexpose scans can be viewed, analyzed, evaluated and treated on Modulo Risk Manager. By bringing the vulnerabilities from Nexpose, we provide organizations with the tools they need to manage risks more efficiently.
The integration allows Modulo's users to better manage their risk by automating the gathering of security and compliance data from global assets. The Modulo Risk Manager software automatically receives vulnerabilities and misconfiguration data collected through neXpose. This data is aggregated in the Modulo Risk Manager allowing users to easily view the data, providing better tracking, risk assessment and compliance documentation.
Some key advantages are:
|
|
|
With Nexpose and Modulo Risk Manager risks are clearly identified and organizations are better prepared to manage them. Through the integration, customers can:
Benefits
Prioritized and integrated platform to manage risks Intelligent integrated scanning Reduced operational costs Integration with a GRC Plataform Workflow to remediation
- (866) 663-5802
- www.modulo.com
Modulo Profile
Modulo is a leading global enterprise provider of comprehensive Governance, Risk and Compliance (GRC) management solutions. Modulo's award-winning Risk Manager™ provides over 1,000 world-wide organizations with the tools they need to automate the entire GRC management process to monitor, manage and sustain adherence to policy and regulations while reducing enterprise risk and complexity.
Modulo Integration Summary
Modulo Risk Manager integrates Nexpose Vulnerability Management to deliver comprehensive security risk and compliance management capabilities to global customers.
Modulo Risk Manager provides a comprehensive solution for governance, risk and compliance. Through the integration, customers can better manage their organization's risks by proactively identifying, tracking, reporting, and managing risks in automated way. The vulnerabilities identified by Nexpose scans can be viewed, analyzed, evaluated and treated on Modulo Risk Manager. By bringing the vulnerabilities from Nexpose, we provide organizations with the tools they need to manage risks more efficiently.
The integration allows Modulo's users to better manage their risk by automating the gathering of security and compliance data from global assets. The Modulo Risk Manager software automatically receives vulnerabilities and misconfiguration data collected through neXpose. This data is aggregated in the Modulo Risk Manager allowing users to easily view the data, providing better tracking, risk assessment and compliance documentation.
Some key advantages are:
|
|
|
With Nexpose and Modulo Risk Manager risks are clearly identified and organizations are better prepared to manage them. Through the integration, customers can:
Benefits
Prioritized and integrated platform to manage risks Intelligent integrated scanning Reduced operational costs Integration with a GRC Plataform Workflow to remediation
- (800) 920-RSAM
- www.rsam.com
- sales@rsam.com
Rsam Profile
Rsam's award-winning GRC platform seamlessly integrates business criticality, regulatory assessment data, vulnerabilities and findings to deliver enterprise-wide visibility, oversight and assurance. Our combination of innovative technology, robust content and modular solutions has delivered successful implementations for hundreds of marquee organizations across a variety of vertical industries as well as small-medium enterprises looking for structure and rapid, out-of-the-box deployment. Rsam's modular solutions streamline the governance, risk and compliance process in the areas of: Assessment, Audit, Compliance, Incident Management, Issue & Remediation Tracking, Policy Management, Threat & Vulnerability Management, Risk Inventory and Vendor Risk Management.
- (800) 721 3934
- www.symantec.com
- info@symantec.com
Symantec is a global leader in providing security, storage and systems management solutions to help our customers - from consumers and small businesses to the largest global organizations - secure and manage their information against more risks at more points, more completely and efficiently than any other company. Symantec's unique focus is to eliminate risks to information, technology and processes independent of the device, platform, interaction or location. Symantec Security Information Manager enables organizations to collect, store, and analyze log data as well as monitor and respond to security events to meet IT risk and compliance requirements. It can collect and normalize a broad scope of event data and correlate the impact of incidents based on the criticality to business operations or level of compliance to various mandates. Symantec has operations in more than 40 countries. Symantec is based in Cupertino, California.
Intrusion Prevention Systems (IPS)
- (800) 917-4134
- www.sourcefire.com
Sourcefire Profile
Sourcefire, Inc. (Nasdaq:FIRE), is a world leader in intelligent cybersecurity solutions. Sourcefire is transforming the way Global 2000 organizations and government agencies manage and minimize network security risks. Sourcefire's IPS, Real-time Network Awareness and Real-time Adaptive Security solutions equip customers with an efficient and effective layered security defense - protecting network assets before, during and after an attack. For more information about Sourcefire, please visit www.sourcefire.com.
Network Topology & Risk Analysis
- (913) 948-9570
- www.FireMon.com
- info@FireMon.com
FireMon Profile
FireMon provides enterprises with security management software that gives them deeper visibility and tighter control over their network security infrastructure. Security Manager, Policy Planner, Risk Analyzer and BackBox enable customers to identify network risk, proactively eliminate those vulnerabilities and strengthen security throughout the organization, and reduce the cost of security operations.
RedSeal Networks, Inc. Integration Summary
The integration of Rapid7 Nexpose® with FireMon Risk Analyzer® provides customers with direct access to Nexpose® vulnerability management data within Risk Analyzer for proactive risk analysis and remediation on their networks. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive vulnerability, configuration policy, and asset discovery scan results are then automatically imported into Risk Analyzer.
Risk Analyzer imports data from Nexpose on discovered configuration policies, assets and vulnerabilities. Risk Analyzer then combines the Nexpose vulnerability scan results with the customer's network and security device configurations. These configurations can be manually imported into Risk Analyzer by the customer, or automatically and continuously imported and updated into Risk Analyzer by FireMon Security Manager. Risk Analyzer then identifies gaps in your network where vulnerabilities are exploitable, and graphically highlights the asset that can be compromised, as well as what other assets can be compromised as the attacker pivots from the initial entry point. Risk Analyzer generates a prioritized list of the vulnerabilities that when remediated can reduce the greatest amount of risk with the least amount of effort, and enables customers to virtually apply patches to see the impact of the recommendations on their overall risk posture. Risk Analyzer also supports the concept of scenarios, allowing customers the ability to configure multiple risk scenarios such as partners using a VPN to access ordering systems, geo-political threats wanting to deface corporate web messaging, and internal users direct access to financial data. Risk Analyzer customers can then monitor and track the risk status of these scenarios over time, leveraging this data for use in assessments, reporting and risk management. Additional information on the Rapid7 Nexpose-FireMon Risk Analyzer integration is available from FireMon at www.firemon.com.
RedSeal Networks, Inc. Profile
RedSeal Networks is the world's leading provider of Proactive Security Intelligence solutions. Enterprises worldwide rely on RedSeal for continuous visibility into the overall effectiveness of their IT security infrastructure. This enables organizations to identify their protection gaps and create actionable metrics through performance trending of all defensive systems, security programs and related investments. Founded in 2004 and based in Santa Clara, California, RedSeal has received over $40 million in funding and currently lists more than 200 customers worldwide in commercial, government and non-profit sectors.
RedSeal Networks, Inc. Integration Summary
The integration of Rapid7 Nexpose® with the RedSeal Vulnerability Advisor provides customers with direct access to Nexpose® vulnerability management data within the Vulnerability Advisor for risk analysis reporting. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive vulnerability, configuration policy, and asset discovery scan results are then automatically imported into the RedSeal Vulnerability Advisor.
Implemented as a plug-in, the Rapid7 data collector imports data from Nexpose on discovered configuration policies, assets and vulnerabilities. RedSeal Vulnerability Advisor then combines configurations it gathers on all network devices, including wireless access points, and combines this information with Nexpose vulnerability scan results. It then identifies gaps in your network where vulnerabilities are exposed to untrusted networks and generates a prioritized list of the vulnerabilities that are the greatest business risks so that customers know where to apply coverage to be secure. Customers can then leverage this data for use in assessments, reporting and risk management. Customers can also integrate with other solutions such as the RedSeal® Network Advisor to gain a broader understanding of their risk. Additional information on the Rapid7 Nexpose-RedSeal Vulnerability Advisor integration is available from RedSeal.
- 1-888-316-3933
- www.risk.io
- hello@risk.io
Risk I/O Profile
Risk I/O™, powered by Chicago-based HoneyApps, Inc., is reinventing vulnerability management by simplifying the complexities inherent in securing an organization's assets. Their Software as a Service collapses the critical time elapsed between the detection of a vulnerability and its resolution by automating the vulnerability management process behind the tools. By connecting a number of automated vulnerability scanning solutions with web application, host, network and database vulnerability assessment tools, users can consolidate all organizational security vulnerability information, reporting and management into a single, centralized place. It correlates, normalizes, and presents disparate vulnerability data to users to help make the vulnerability lifecycle more actionable.
Risk I/O Integration Summary
The integration of Risk I/O™ with Nexpose® allows mutual users to connect their Nexpose instance into Risk I/O for advanced vulnerability management. Once connected, each time a security scan is administered in Nexpose, the scan data appears in Risk I/O where it is correlated with other assessment information and automatically prioritized and indexed. Risk I/O then combines this information with other data sources and uses predictive analytics to alert any high priority issues. Risk I/O provides one-click integration with issue tracking and ticketing solutions and then confirms those fixes via automated testing with its bi-directional integration. Built-in metrics, reporting and benchmarks enable businesses to view their data in any way they see fit through the use of tagging, custom fields and meta data.
Security Information & Event Management (SIEM)
ArcSight is a leading global provider of security and compliance management solutions that intelligently identify and mitigate cyber threat and risk for businesses and government agencies. ArcSight helps protect enterprises and government agencies by providing complete visibility and critical insights into their IT infrastructure across all users, networks, datacenters and applications. The market-leading ArcSight platform enables organizations to proactively safeguard their digital assets, control the risks associated with cybertheft, cyberfraud, cyberwarfare and cyberespionage and comply with corporate and regulatory policy.ArcSight is based in Cupertino, California.
ArcSight Integration Summary
The integration of Rapid7 Nexpose ® with the ArcSight SIEM Platform provides customers with direct access to Nexpose ® vulnerability management data within ArcSight SIEM for risk analysis reporting. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive vulnerability, configuration policy, and asset discovery scan results are then automatically imported into the ArcSight SIEM. Implemented as an agent, the ArcSight SmartConnector lets you import events generated by the Rapid7 Nexpose XML File into the ArcSight System from a designated directory in XML Export format. The ArcSight SIEM then parses, normalizes and stores vulnerability data from Nexpose into the ArcSight database to serve as referential information. ArcSight correlates event information it gathers on all network devices, combines this information with Nexpose vulnerability scan results, and then identifies gaps in your network where vulnerabilities exist enabling more targeted investigation of suspicious or unusual network activity in real-time. This insight enables customers to generate a prioritized list of the vulnerabilities that are the greatest business risks so that customers know where to apply coverage to be secure. Customers can then leverage this data for use in assessments, reporting and risk management. Additional information on the SmartConnector™ Configuration for Rapid7 Nexpose is available from ArcSight.
- (877) 905-6661
- www.secureworks.com
- info@secureworks.com
Dell SecureWorks focuses exclusively on security services to protect thousands of customers around the world. Dell Inc. (NASDAQ: DELL) listens to customers and delivers worldwide innovative technology and business solutions they trust and value. Recognized as an industry leader by top analysts, Dell SecureWorks provides world-class information security services to help organizations of all sizes protect their IT assets, comply with regulations and reduce security costs.
- (978) 684-1000
- www.enterasys.com
- info@enterasys.com
Enterasys delivers Secure Networks™ that ensure the confidentiality, integrity and availability of IT services to the business users that rely on them - without sacrificing performance. You don't have to choose whether to deploy security at the edge, around the middle or in the core of the data center - it's built-in everywhere with granular, policy-based visibility and control over individual users and applications. Enterasys is based in Andover, Massachusetts.
Enterasys Integration Summary
The Enterasys Dragon Console is an OEM of the Q1 Labs QRadar SIM/SIEM product. Refer to Q1 Labs QRadar SIM/SIEM for additional information.
- (888) 586-4737
- www.juniper.net
- info@juniper.net
Juniper Networks' high-performance network infrastructure helps businesses create a responsive and trusted environment for accelerating the deployment of services and applications over a single network. With Juniper, businesses can capitalize on opportunities to innovate, grow and strengthen their business and answer the challenge of complicated, legacy networks with high-performance, open, flexible solutions. Juniper Networks is based in Sunnyvale, California.
Juniper Networks Integration Summary
The Juniper Security Threat Response Manager (STRM) is an OEM of the Q1 Labs QRadar SIM/SIEM product. Refer to Q1 Labs QRadar SIM/SIEM for additional information.
- (408) 215-5900
- www.loglogic.com
- info@loglogic.com
LogLogic® is the IT Data Management Company. More than 1,200 customers worldwide entrust their most sensitive IT data to LogLogic's award-winning products. For more information on LogLogic and IT Data Management, visit us on the web at www.loglogic.com or on Twitter or Facebook.
- (303)413-87450
- www.logrhythm.com
- info@logrhythm.com
LogRhythm, a global leader in Log Management and SIEM 2.0, empowers its customers with the visibility and insight and situational awareness needed for cyber threat defense, detection and response, compliance automation and assurance, and operational intelligence. LogRhythm seamlessly integrates log and event management, file integrity monitoring and host activity monitoring in a single SIEM 2.0 platform.
netForensics delivers the most well-engineered security compliance management solutions available today. netForensics (nFX)is renowned for providing powerful, scalable, flexible solutions that help organizations take control of security, operations, and compliance-from real-time threat identification and mitigation to log management and audit readiness. Their patented, award-winning technologies tie together silos of data to obtain a complete, understandable picture of network security and compliance posture. nFX One centralizes huge volumes of data-from the perimeter to the core of the network-delivering the right security information into the right hands at the right time. In this way, nFX One solutions dramatically improve your organization's ability to identify and rapidly respond to threats. Companies can finally gain an effective, proactive approach to protecting critical data and ensuring compliance with regulatory mandates and corporate policies. netForensics is based in Edison, New Jersey.
netForensics, Inc. Integration Summary
The integration of Rapid7 Nexpose® with the netForensics (nFX) SIM One Solution™ provides customers with direct access to Nexpose® vulnerability management data within nFX SIM One for risk analysis reporting. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive vulnerability, configuration policy, and asset discovery scan results are then automatically imported into nFX One. Implemented as an agent, the nFX Scanner Agent for Rapid7 imports the Rapid7 scan files from a designated directory in XML Export format. It is necessary to confirm that nfadmin user(when agent is installed on Linux/Solaris) or Administrator user(when agent is installed on Windows) has read access to this directory and scanner files inside this directory. nFX SIM One then parses, normalizes and stores vulnerability data from Nexpose into the nFX database to serve as referential information. nFX One correlates event information it gathers on all network devices, combines this information with Nexpose vulnerability scan results, and then identifies gaps in your network where vulnerabilities exist enabling more targeted investigation of suspicious or unusual network activity in real-time. This insight enables customers to generate a prioritized list of the vulnerabilities that are the greatest business risks so that customers know where to apply coverage to be secure. Customers can then leverage this data for use in assessments, reporting and risk management. Additional information on the Rapid7 Nexpose-netForensics SIM One Solution is available from netForensics.
- (603)766-8160
- www.nitrosecurity.com
- info@nitrosecurity.com
NitroSecurity develops high-performance security information and event management (SIEM) solutions that protect critical information and infrastructure. NitroSecurity solutions reduce risk exposure and increase network and information availability by removing the scalability and performance limitations of security information management. Utilizing the industry's fastest analytical tools, NitroSecurity identifies, correlates and remediates threats in minutes instead of hours, allowing organizations to quickly mitigate risks to their information and infrastructure.
- (800) 529-3400
- www.novell.com
- info@novell.com
Novell integrates mixed IT environments, allowing people and technology to work as one. Novell Sentinel is a robust, scalable, and mature real-time security information event management (SIEM) system, trusted and proven in some of the world's largest organizations. Novell Sentinel™ is the market-leading security information management and compliance monitoring solution. Delivering unmatched performance and scalability, Sentinel supports the largest, most complex IT environments in a cost-effective manner. Sentinel automates the process of monitoring for policy violations, identifying and responding to violations, and delivering compliance metrics to demonstrate the effectiveness of critical IT controls. The Sentinel Control Center provides a central console for real-time monitoring, event correlation, incident management and reporting. Novell is based in Waltham, Massachusetts.
Novell Integration Summary
The integration of Rapid7 Nexpose® with the Novell Sentinel™ provides customers with direct access to Nexpose® vulnerability management data within Novell Sentinel™ for risk analysis reporting. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive vulnerability, configuration policy, and asset discovery scan results are then automatically imported into the Novell Sentinel. Implemented as a plug-in, the Rapid7 data collector for Sentinel imports, parses, normalizes and stores vulnerability data from Nexpose into the Sentinel database to serve as referential information. Novell Sentinel takes event information it gathers on all network devices, combines this information with Nexpose vulnerability scan results, and then identifies gaps in your network where vulnerabilities exist enabling more targeted investigation of suspicious or unusual network activity in real-time. This insight enables customers to generate a prioritized list of the vulnerabilities that are the greatest business risks so that customers know where to apply coverage to be secure. Customers can then leverage this data for use in assessments, reporting and risk management. Additional information on the Rapid7 Nexpose- Novell Sentinel integration is available from Novell.
- (877) 333-1433
- www.prismmicrosys.com
- sales@prismmicrosys.com
Prism provides easy-to-deploy products for integrated Security Management, Change Management and Intrusion Detection. EventTracker, Prism’s market leading enterprise Security Information and Event Management (SIEM) and Log Management solution enables commercial enterprises and government organizations to increase the security of their environments and reduce risk to their enterprise.
- (781) 250-5800
- www.q1labs.com
- info@q1labs.com
Q1 Labs, an IBM company, is a global provider of high-value, cost-effective next-generation security intelligence products. The company's flagship product, the QRadar Security Intelligence Platform, integrates previously disparate functionsÑincluding SIEM, risk management, log management, network behavior analytics and security event managementÑinto a total security intelligence solution, making it the most intelligent, integrated and automated security intelligence solution available. QRadar provides users with crucial visibility into what is occurring with their networks, data centers, and applications to better protect IT assets and meet regulatory requirements. Q1 Labs is a US based company with headquarters located in Waltham, MA with sales and support offices throughout North America and Europe. The company also has research & development and cus tomer support centers in Belfast, Northern Ireland and in Fredericton, New Brunswick. Q1 Labs was acquired by IBM in October 2011.
Q1 Labs Integration Summary
The integration of Rapid7 Nexpose® with Q1 Labs' QRadar SIEM provides customers with direct access to Nexpose® vulnerability management data within QRadar for risk analysis reporting. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive vulnerability, configuration policy, and asset discovery scan results are then automatically imported into QRadar. The integration of Rapid7 Nexpose® with Q1 Labs' QRadar SIEM integration with Rapid7 allows you to schedule scans to keep your vulnerability assessment data up-to-date.
The VA Configuration tab is used to configure the Rapid7 collector for QRadar, which then imports, parses, normalizes and stores vulnerability data from Nexpose into the NitroView database to serve as referential information. QRadar takes event information it gathers on all network devices, combines this information with Nexpose vulnerability scan results, and then identifies gaps in your network where vulnerabilities exist enabling more targeted investigation of suspicious or unusual network activity in real-time. This insight enables customers to generate a prioritized list of the vulnerabilities that are the greatest business risks so that customers know where to apply coverage to be secure. Customers can then leverage this data for use in assessments, reporting and risk management. Additional information on the Rapid7 Nexpose-Q1 Labs' QRadar integration is available from Q1 Labs.
- (800) 495 1095
- www.rsa.com
- sales@rsa.com
RSA, The Security Division of EMC, is the premier provider of security solutions for business acceleration, helping the world's leading organisations succeed by solving their most complex and sensitive security challenges. RSA's information-centric approach to security guards the integrity and confidentiality of information throughout its lifecycle - no matter where it moves, who accesses it or how it is used.
RSA offers industry-leading solutions in identity assurance & access control, encryption & key management, compliance & security information management and fraud protection. These solutions bring trust to millions of user identities, the transactions that they perform, and the data that is generated. For more information, please visit www.RSA.com and www.EMC.com.
- (866) 530 8100
- www.solarwinds.com
- sales@solarwinds.com
SolarWinds Inc. (NYSE: SWI), a leading provider of powerful and affordable IT management software. SolarWinds Log & Event Manager (formerly TriGeo SIM) can help you declare victory over IT operations, compliance, and security challenges.
- (800) 721 3934
- www.symantec.com
- info@symantec.com
Symantec is a global leader in providing security, storage and systems management solutions to help our customers - from consumers and small businesses to the largest global organizations - secure and manage their information against more risks at more points, more completely and efficiently than any other company. Symantec's unique focus is to eliminate risks to information, technology and processes independent of the device, platform, interaction or location. Symantec Security Information Manager enables organizations to collect, store, and analyze log data as well as monitor and respond to security events to meet IT risk and compliance requirements. It can collect and normalize a broad scope of event data and correlate the impact of incidents based on the criticality to business operations or level of compliance to various mandates. Symantec has operations in more than 40 countries. Symantec is based in Cupertino, California.
Symantec Integration Summary
The integration of Rapid7 Nexpose® with the Symantec Security Information Manager (SIM) provides customers with direct access to Nexpose® vulnerability management data within the Symantec SIM for risk analysis reporting. Nexpose scans the broadest range of assets across infrastructures, Web applications and databases for threats. Nexpose's comprehensive vulnerability, configuration policy, and asset discovery scan results are then automatically imported into the Symantec SIM. Implemented as an agent and Collector, the Rapid7 data collector for Symantec SIM imports, parses, normalizes and stores vulnerability data from Nexpose in the Symantec SIM database to serve as referential information. The Symantec SIM takes event information it gathers on all network devices, combines this information with Nexpose vulnerability scan results in order to identify gaps in your network where vulnerabilities exist enabling more targeted investigation of suspicious or unusual network activity in real-time. This insight enables customers to generate a prioritized list of the vulnerabilities that are the greatest business risks so that customers know where to apply coverage to be secure. Customers can then leverage this data for use in assessments, reporting and risk management. Additional information on the Rapid7 Nexpose-Symantec SIM integration is available from Rapid7.
Consultants
North America
- (800)574-0896
- www.accuvant.com
- info@3r1technologies.com
Accuvant is the nation's premier information security and risk management consulting firm and solutions provider. We help large enterprises assess their environments, improve their compliance postures, and secure their infrastructures. Accuvant was a member of the Inc. 5000 Fastest Growing Private Companies in 2007 and 2008. Headquartered in Denver, Accuvant has 21 offices across the United States.
- (888) 264-8426
- www.anitian.com
- info@anitian.com
Anitian Enterprise Security Profile
Anitian Enterprise Security is a leading provider of information security services and solutions. Anitian delivers the intelligence, vision and guidance top performing organization demand to work productively and securely.
- (877) 224-8077
- www.coalfiresystems.com
- sales@coalfiresystems.com
Coalfire is an IT audit and compliance management firm that serves clients in the PCI, financial services, retail, healthcare, education, electric utility, and government sectors. From offices in Colorado, Washington, San Diego, and New York, Coalfire provides services that include: IT audits, control reviews, risk assessments, penetration tests, vulnerability scans, and digital forensics.
CoreIP Solutions is an international business and information technology firm based in Irvine, CA. Our areas of specialization include Financial Services, Enterprise Architecture, Systems Integration, Security and Compliance. Our Security practice focuses heavily on vulnerability assessment, remediation and audit preparedness. We square our vision firmly on your metrics of success.
- 1 888 EXOIS IT
- www.exois.com
- sales@ExoIS.com
ExoIS Inc Profile
ExoIS provides Information Security, Compliance and IT advisory and support to businesses, helping their clients identify and mitigate the risks inherent in today's increasingly interconnected business environments. As a PCI Qualified Security Assessor, today they provide a wide range of PCI services as well as other offerings covering the full spectrum of their clients' information security requirements. They also offer a range of managed services including secure cloud hosting, datacenter outsourcing, compliant SaaS solutions and storage services. Discounted rates on services are available to all Rapid7 customers.
- (888) 732-9406
- www.fishnetsecurity.com
- (877)225-3623
- info@calence.com
- www.calence.com
- (401)334-0799
- www.lighthousecs.com
- info@lighthousecs.com
Lighthouse Computer Services was founded over 10 years ago with the goal of building long-term technology partnerships with mid-to-large size enterprises. Today, Lighthouse is a trusted IT services provider to over 200 leading companies throughout the Northeast United States, offering consulting, integration and maintenance services on the latest hardware and software technologies.
For over 12 years, Guidance Consulting has been delivering profitable technology results to everything from small, private firms to Fortune 500 companies. In addition to meeting employment and staffing needs, we implement a wide range of IT solutions that help companies to cut costs, increase productivity, and really get the most out of the current technologies available for businesses of all sizes.
Our specialists work with you to develop intelligent technology solutions tailored specifically for the way you do business.
However, as a comprehensive IT consulting and staffing firm, we're always looking at ways to create services that not only meet your current needs, but anticipate your future ones. With that in mind, our clients consistently look to us for:
- IT Recruiting
- Security Operations
- Proactive System Monitoring Processes
- Capacity Planning
- IT Solution Engineering and Orchestration
Stability Networks, Inc. Profile
Stability Networks is a technology consulting firm that creates strong communication foundations for businesses. We build quality voice and data networks that secure sensitive company data, improve team productivity, promote organizational growth, and create a competitive business advantage.
- (859)263-7344
- www.sdgsecure.com
- sales@sdgsecure.com
Systems Design Group (SDG) is a professional services organization, specializing in assisting clients with complex technology challenges. SDG places specific focus on Information Security, working with clients across various business sectors (Financial, Healthcare, Government and General Industry) on engagements ranging from security assessments and consulting to solution implementation projects.
- (508)561-7313
- www.tbgsec.com
- fmurphy@tbgsec.com
TBG Security was founded in 2003 to provide world-class information security consulting services.
During interviews with client, our founders discovered that clients felt many security consulting companies were focused on selling products in which they had financial motivations, rather than providing independent, unbiased advice. TBG does not maintain resale relationships with hardware or software vendors, enabling us to offer truly objective advice and solutions. Because we are without a product bias, we can advise your organization of the critical security, compliance and continuity solutions that meet your business, financial and technology objectives.
Some of the world’s most admired companies trust us to develop solutions tailored to their most essential and most sensitive requirements. We understand the challenges of regulatory compliance and your need to stay protected so you can stay focused on growing your business.
International
- 5411-4777-3107
- www.bonsai-sec.com
- info@bonsai-sec.com
Bonsai is a company involved in providing professional computer information security services; with a focus on Web application penetration testing. Currently a sound growth company, since its foundation in early 2009 in Buenos Aires, Argentina, we are fully committed to quality service, and focused on our customers' real needs.
- 0044 (0)208 616 2981
- www.enetcs.eu
- info@enetcs.eu
Enet have been providing expert IT consultancy since 2001.
Our specialism is to match the best people and solutions to enterprise business needsA City of London organization whose aim is to bring together ‘best of breed’ IT enterprise vendor solutions and skills with corporate IT requirements.
A vendor independent expert with over 20 years’ experience of delivering IT Recruitment, Security, Infrastructure, Compliancy, Services and Support.
- +(57 1) 638 6130
- www.j2ksec.com
- contactenos@j2ksec.com
We are a company of experts in consulting services and products aimed at Information Security. We are Rapid7 Partner Resellers, located in Bogota, Colombia. Visit us at www.j2ksec.com.
- +61 2 9467 8807
- www.securemanage.com.au
- sales@securemanage.com.au
SecureManage is an independent Managed Security Services Provider and IT Security Consulting firm who delivers effective protection through an extensive range of leading security solutions and consulting services.
Our core competencies lie in the areas of customer premise security, network security, cloud security and security policy development.
Through our experienced and qualified security consultants, and built around the range of solutions from Rapid7, along with our proprietary security tools, SecureManage provides vulnerability management, incident management, compliance and penetration testing and network & database security for organisations of all sizes.
Our consultants understand the technology that runs your business and are specialists in vulnerability discovery and exploit development, allowing us to determine exactly what tests and attacks could and should be protected against.
- 00971-6 5575599
- www.sentelist.net
- info@sentelist.net
Sentelist is an IT Security Consultancy firm with specialization in IT security audits of PCI, ISO27001 etc., managed security services, security operations center (SOC), conducting compliance reviews, network architecture reviews, vulnerability assessments, ethical hacking, penetration testing, computer security incident handling and forensic investigations
Sentelist consultants have rich experience in consulting across all the vertical market platforms like Aviation, Telecom, Internet Service Providers, Managed Hosting & Security Providers, Large Corporate Banks, Government organizations, Retail industry etc. in all over middle east.
Resellers
North America
- (800) 574-0896
- www.accuvant.com
- info@3r1technologies.com
Accuvant, Inc. Profile
Accuvant is the nation's premier information security and risk management consulting firm and solutions provider. We help large enterprises assess their environments, improve their compliance postures, and secure their infrastructures. Accuvant was a member of the Inc. 5000 Fastest Growing Private Companies in 2007 and 2008. Headquartered in Denver, Accuvant has 21 offices across the United States.
- (603)433-1700
- www.adaptcom.com
- info@adaptcom.com
Adaptive Communications, LLC Profile
Adaptive Communications is the Northeast's leading provider of customized, robust and flexible IT Infrastructure and Information Security solutions.
Partnering with leading manufacturers, Adaptive understands the complex world of technology. Our comprehensive Network, Storage and Information Security Solutions and Services have not only won our customers' trust, but have helped our clients achieve results, meet compliance mandates and guard against hidden vulnerabilities and potential threats.
- 540-882-3535
- www.agsisystems.com
- matt@agsisystems.com
AGSI Systems Profile
IT Solutions for Federal Government. Hardware - Software - Audio/Video - Maintenance – Cabling.
- (888)264-8426
- www.anitian.com
- anitian.sales@anitian.com
Anitian Enterprise Security Profile
Anitian Enterprise Security is the nation’s leading provider of information security, services, solutions, and support. Anitian’s security experts identify risks, deploy safeguards, ensure compliance, and monitor client security systems for attacks. Anitian delivers practical results that empowers today’s business to go further, work better, and protect data – without compromising speed, efficiency, or reliable access to information.
- (401) 353 3024
- www.compassitc.com
- wdepalma@compassitc.com
Compass IT Compliance, LLC Profile
Compass IT Compliance provides experienced, certified IT Auditors to perform your IT audit and compliance work at a lower cost than maintaining your own internal auditing staff. By outsourcing your IT Audit and Compliance requirements to Compass, you can save costs while ensuring complete IT compliance by employing objective, certified consultants from an independent and trusted IT leader.
Compass can help you minimize and manage your IT Compliance burden:
- Compass' expertise in IT Auditing and Compliance spans multiple industries, software platforms, and applications
- Each member of our IT Compliance team is a Certified Information Systems Auditor (CISA)
- Each IT Auditor possesses more than ten years experience within the industry
- All of our projects follow the strict CoBiT® Framework, adhering to specific industry and government standards
- We possess a proven track record of success in the financial services sector
- All of our work in the banking industry closely follows the latest FFIEC Guidance
- (305)438-7577
- www.compuquip.com
- drosenwald@compuquip.com
Compuquip a fully integrated IT company with managed services, Internet security, professional services, and cabling divisions supporting more than 300 South Florida businesses.
CoreIP Solutions is an international business and information technology firm based in Irvine, CA. Our areas of specialization include Financial Services, Enterprise Architecture, Systems Integration, Security and Compliance. Our Security practice focuses heavily on vulnerability assessment, remediation and audit preparedness. We square our vision firmly on your metrics of success.
- 1 888 EXOIS IT
- www.exois.com
- sales@ExoIS.com
ExoIS Inc Profile
ExoIS provides Information Security, Compliance and IT advisory and support to businesses, helping their clients identify and mitigate the risks inherent in today's increasingly interconnected business environments. As a PCI Qualified Security Assessor, today they provide a wide range of PCI services as well as other offerings covering the full spectrum of their clients' information security requirements. They also offer a range of managed services including secure cloud hosting, datacenter outsourcing, compliant SaaS solutions and storage services. Discounted rates on services are available to all Rapid7 customers.
- (800)228-TECH (8324)
- www.FusionStorm.com
- info@FusionStorm.com
FusionStorm Profile
FusionStorm is a national provider of IT products, professional services, support contract services, and 24x7 managed services for enterprises of all sizes. The company assists organizations by providing complete solutions for system infrastructure, storage, networking, voice-over-IP communications, security, disaster recovery, managed hosting, and remote managed services, both on-site and in the data center.
- (800)228-TECH (8324)
- www.integralis.com
- marketing@us.integralis.com
Integralis is a global information risk management solutions provider. We deliver a complete portfolio of managed security, IT infrastructure, consulting and technology integration services that help organizations lower IT costs while achieving a greater depth of security protection, compliance and service availability. Integralis, Inc. is an independent subsidiary of NTT Communications. For more information, visit www.integralis.com
- (603)560-3330
- www.itfederalsales.com
- dhooper@itfedsales.com
IT Federal Sales LLC Profile
IT Federal Sales is a Federal Contractor that provides information technology solutions to federal, state and local government agencies. We hold the GSA contract for Rapid 7 products under GS-35F-0494T.
Most government agencies recognize that they need help with managing their most complex technical goals and priorities. IT Federal Sales has a proven track record in helping government agencies improve their organizational structure, processes and focus through the proper implementation of appropriate technology solutions.
- (401)334-0799
- www.lighthousecs.com
- info@lighthousecs.com
Lighthouse Computer Services was founded over 10 years ago with the goal of building long-term technology partnerships with mid-to-large size enterprises. Today, Lighthouse is a trusted IT services provider to over 200 leading companies throughout the Northeast United States, offering consulting, integration and maintenance services on the latest hardware and software technologies.
4651 Roswell Road, Suite D304 Atlanta, GA 30342
- (877) 744-3444, (954)788-7110
- www.locked.com
- sales@locked.com
Mission Critical Systems is an IT Security Reseller and Integrator that has been providing top quality security solutions throughout Florida, Georgia, and the Caribbean since 1997. Our mission is to provide best-in-breed data and network security products with expert services that will reduce our client's exposure to information theft and destruction.
- 312-726-6900
- www.nexuminc.com
- salesinfo@nexuminc.com
Nexum, Inc. is an IT security and networking company that builds and secures global networks for organizations across multiple verticals around the world. Nexum believes that by remaining absolutely focused on our clients' needs, success necessarily follows. Nexum meets those needs through a holistic, value-based approach that includes best-in-breed products, professional services, Nexum-branded manufacturer support, authorized training, and monitored and managed security services.
- (800) 675-5152
- www.praetorian.com
- sales@praetorian.com
Praetorian Profile
Praetorian® is an information security provider and research center that provides risk assessment, penetration testing, secure software development, computer forensics, and security education services. Our mission is to help our clients understand and minimize their overall risk and liability. Through our assessment services, your organization can obtain an accurate, independent security evaluation. Through our advisory offerings, we can help your organization build, define, communicate, and enforce a comprehensive security strategy.
- (800)779-5042
- www.proficio.com
- info@proficio.com
Proficio is a leading provider of security, risk management, and compliance solutions. Enterprises benefit from Proficio's knowledge and real world experience in delivering large successful projects and rely on our team for consulting, implementation, auditing, and managed services.
- (225)636-2180
- http://securenation.net
- jon.davis@securenation.net
Secure Nation Profile
We offer a wide variety of cutting edge technologies and IT services to address almost any of your information security, network security and information assurance needs. We are dedicated to working with the best of breed solutions that enable our clients to focus on what they do best and not the headaches of a poorly secured business. We work with clients of all sizes, in all areas of the US and we can help you find the right solutions at great prices. We work with colleges, financial institutions, state government, health-care and commercial businesses to solve some of their most difficult information security and overall technology issues such as Mobile Fleet Device Security.
- (888)881-6661 ext 311
- www.stigroup.net
- sales@stigroup.net
STIGroup Profile
Secure Technology Integration Group, Ltd. (STIGroup) is an Information Security Consulting firm that provides a full suite of Information Security services. STIGroup designs, implements, and maintains the systems and procedures that permit your business to utilize technology productively while maintaining the confidentiality, integrity, and availability of your mission-critical information. In addition to design and implementation services for products like Rapid7 Nexpose, STIGroup provides managed services to monitor and maintain this and other implementations to ease the burden on your internal staff.
- (877) 664-9379
- www.security7.net
- sales@security7.net
Security7 Networks Profile
Security7 has helped customers numbering in the hundreds improve the efficiency of their operations, manage risk and reduce costs. Clients include small firms that prefer to focus management attention on core business issues, large corporations seeking to enhance their IT infrastructure without adding permanent staff, and a large number of mid-sized enterprises that need access to a variety of specialized skills and services.
- (248) 837-1400
- www.sequrisgroup.com
- info@sequrisgroup.com
As a complete information technology solution provider, Sequris Group actively helps companies focus on their core business by providing IT services for network consulting, management, implementation, and training. Sequris Group’s team members have worked nationally with large businesses ranging from corporations with more than 500 employees and $100 million in annual revenues to Fortune 500 companies.
- 303-798-7576
- www.southseascorp.com
- sales@southseascorp.com
South Seas Corporation Profile
South Seas Corporation, a Colorado Corporation specializing in Information Security and Compliance. South Seas Corporation will assist large organizations in securing their IT infrastructure and data while maintaining and sustaining compliance.
- (859)263-7344
- www.sdgsecure.com
- sales@sdgsecure.com
Systems Design Group, Inc Profile
Systems Design Group (SDG) is a professional services organization, specializing in assisting clients with complex technology challenges. SDG places specific focus on Information Security, working with clients across various business sectors (Financial, Healthcare, Government and General Industry) on engagements ranging from security assessments and consulting to solution implementation projects.
- (858)566-1900
- www.tig.com
Technology Integration Group Profile
Technology Integration Group (TIG) is a premier IT systems integrator with over 28 years of experience. With 22 offices in the US and additional locations in Germany and china, TIG provides a breadth of IT products and services for companies and organizations of all sizes in the US and globally. TIG officers a personal, consultative approach to fulfilling your organizations specific computing needs and customizing IT solutions to best meet your unique infrastructure requirements. Financially stable and profitable every year since the company's inception in 1981, TIG has built long-term relationships with clients by solving IT issues on time and within budget.
- 949-250-3290
- www.tevora.com
- info@tevora.com
Tevora Business Solutions Profile
Tevora Business Solutions is an enterprise solutions provider focused on security and compliance. With a distinctive combination of proven products and services, Tevora aids enterprises in protecting their most important assets from external and internal threats. We base our practice on the need for clarity, objectivity and expertise in the design, implementation and validation of network security solutions.
- 949-333-2300
- www.trace3.com
- khigginbotham@trace3.com
Trace3 Profile
Trace3 offers security assessment services designed to help minimize risk, improve operational efficiency, and satisfy regulatory mandates. We provide organizations with the metrics needed to make critical business decisions on where to spend valuable time and money protecting your assets while maintaining industry best practices and regulatory compliance.
International
- +91 120 424 3669
- www.aksitservices.co.in
- sales@aksitservices.co.in
AKS IT is a provider of wide range of IT Security Services including Information Risk Management, Cyber Forensics, Mobile Forensics & Cyber Crime Investigation, Information Security Training, Computer Security Incident Response Team (Design, Setup and Training) and Security Operations Centre (Design & Implementation). The Company has been empanelled by CERT-In as an Information Security Auditing Organization and Controller of Certifying Authorities (CCA).
- +61 2 9968 1234
- www.aquion.com.au
- info@aquion.com.au
Aquion supplies Networking and Security products from leading vendors to Australia and New Zealand enterprise and government organisations. Aquion is pleased to work with Rapid7 due its leadership position in vulnerability management and penetration testing. Rapid7 will complement Aquion's customer offerings from Sourcefire, RedSeal, Symantec and Solarwinds.
- +593-8-444-0111
- www.bluehatconsultores.com
- rapid7@bluehatconsultores.com
Blue Hat Consultores is an Information Security firm, which aims to advise companies to optimize and secure their organization.
- +52 81 8625 6560
- www.codigoverde.com
- david@codigoverde.com
Codigo Verde is an information security firm specialized in penetration testing and audit services. We are certified trainers for the most prestigious programs in the industry offering our services in Latin America. We are based in Monterrey, Mexico.
- 5411-4383-8999
- www.cservices.com.ar
- ventas@cservices.com.ar
Consulting Services S.R.L. Profile
At Consulting Services, we are focused on deliver a complete solution to Security and Infrastructure challenges involved nowadays on the Enterprise. We are committed to the mission of helping our customers to achieve their business objectives.
- +507 317-1316 / +507 394-9504
- www.cdsi.com.pa
- info@cdsi.com.pa
We are an Information Security company focused exclusively in Penetration Testing, Vulnerability Assessment, GRC, Managed Security and Remediation services for all the Central America region. Our consultants are highly certified in the security field holding the CISSP, CISA, CISM, CEH and Security+ certifications among others.
- +41 848 820 420
- www.comsoft.ch
- info@comsoft.ch
Comsoft direct AG Profile
License Solutions from a single Source.
Comsoft direct is one of the largest licensing specialists in the Swiss market. Comsoft direct employees are recognized experts in the software asset management and software licensing fields. They ensure that all businesses, irrespective of size, receive software products, solutions and services that are tailored to them.
- +39 02 69 37 43 20
- www.cryptonet.it
- info@cryptonet.it
CryptoNet Srl Profile
Cryptonet is a senior member of the Infosec community in Italy. Founded in 1995, it serves a base of large and midsize customers in local and central Government, Finance, Manufacturing, Utilities and Health Care across Italy.
Based in Milan with an office in Rome Cryptonet can bring the exceptional value of 15 years of successful commitment to the security and the compliance of its Customers.
- 55 31 32415045
- www.cw4.com.br
- info_rapid7@cw4.com.br
CW4 Group Profile
CW4 is one of the most innovative security companies in Brazil. The service approach based on closer relationship with customers and highly efficient technical staff attends several medium and large business across the country. CW4 was founded 10 years ago and it is a services provider attending companies offering content management services and security software technologies.
- 0845 6580234
- www.cy4or.co.uk
- info@cy4or.co.uk
CY4OR Profile
CY4OR is a leading global provider of risk management solutions including vulnerability assessment, penetration testing and forensic readiness planning. Our services enable businesses to quantify and qualify security risks, and apply resources to remediate those risks in the most efficient manner. Combining CY4OR’s nine year experience in digital forensics with risk management provides both proactive and reactive services, which combined help businesses protect the confidentiality of their corporate information, disruption to services and lost business costs. Our vulnerability assessment and penetration testing services are complimented by forensic readiness planning which ensures companies are prepared should they need to respond to a regulatory compliance, support a digital forensic investigation, or as part of an internal investigation.
- +970 2 2989189
- www.cystack.ps
- info@cystack.ps
CYSTACK Profile
Cystack is the leading information security consultancy firm in Palestine. We understand the need to protect the confidentiality; integrity and availability of organizational assets. Cystack brings top information security professionals to the market. The team at Cystack is highly qualified with years of experience within the fields of IT and information security. We hold some of the world’s top IT and information security qualifications and certifications. Understanding our client’s needs and customizing solutions to their needs is our competitive advantage that sets us apart.
- +352 26 74 69 - 1
- www.dartalis.lu
- info@dartalis.lu
dartalis S.A. Profile
Since 2001, dartalis offers IT security services, including solutions integration, compliance, audit, architecture design, networking and extended support.
- +61 1300 23 28 23
- www.cw4.com.br
Data#3 Limited Profile
Data#3 Limited (ASX: DTL) is a national Information and Communication Technology (ICT) solutions company.
Customers utilise Data#3's expertise to deliver exceptional value in:
- Software licensing and software asset management solutions to optimise and manage the acquisition of productivity and security software in volume, predominantly for desktop and networking environments
- Infrastructure solutions to design, deploy and operate desktop, network and data centre hardware and software infrastructure as the foundation for productivity and corporate software applications
- People solutions providing contract and permanent recruitment and human capital performance management.
Data#3's customers cover a wide range of industries including banking and finance, mining, tourism and leisure, legal, healthcare, manufacturing, distribution, government and utilities that are located throughout Australia and Asia Pacific.
- +44 (0)203 397 0142
- www.dlp-assured.com
- sales@dlp-assured.com
DLP Assured Profile
DLP Assured is an authorised Rapid7 London based partner operating in the UK, Europe & Middle East.
We have extensive experience of IT security, networking, operating systems, database and web servers.
We help corporate and government organisations reduce the costs and complexity of operating an effective information security programme.
Taiwan: 6F-1, No 337, Fuxing North Rd., Taipei 105, Songshan District, Taipei 105, Taiwan
- +86-21-64403373 (China)
+886-2-27175608 (Taiwan) - www.docutek-inc.com
- frank@docutek-inc.com
Docutek Solutions, Inc. is a value-added distributor, also a professional security solution provider in China and Taiwan. Focus on value-added business, we partner with our vendors & resellers to provide products with our professional support & services that helps our clients plan, build, support and manage their IT security governance. Today we are positioned at the forefront of enterprise security governance.
- +971 4391 3040
- www.ehdf.com
- info@ehdf.com
eHosting DataFort is a leading provider of Managed IT Services and a fully owned subsidiary of TECOM Investments. With world-class data centres, eHDF has 24/7 Managed operations and a Service Desk to provide round the clock support. Our customers include Dubai e-Government, Jumeirah Group, Dunia Finance, Panasonic, Khaleej Times and du.
Dubai Office: Liwa Heights, Jumeirah Lake Towers, Offices 3707-3708, PO Box 454518, Dubai, UAE
- +971 4 3686700
- www.emw-me.com
- sales@emw-me.com
EMW ME, a member of EMW Inc., a privately held group of companies headquartered in Herndon Virginia USA with main offices in the UAE, Belgium, China and remote offices spanning four continents. Established in the region since 2003, partner of global vendors with the objective of providing premier customer-oriented Information and Communications Technology products and services for local, regional and global clients. For additional information, please visit www.emw-me.com or email us on marcom@emw-me.com.
- +90 216-4709423
- www.endersys.com.tr
- sales@endersys.com.tr
Endersys Danismanlik Yazilim Ltd Profile
Endersys, has been founded in March 2006, to create quality products, solutions, consultancy and training on Information Technology.
With its unique technical expertise, Endersys has proved a high level of customer satisfaction in a very short period of time, making it, one of the most well-known IT companies in its area.
- 0044 (0)208 616 2981
- www.enetcs.eu
- info@enetcs.eu
Enet have been providing expert IT consultancy since 2001.
Our specialism is to match the best people and solutions to enterprise business needsA City of London organization whose aim is to bring together ‘best of breed’ IT enterprise vendor solutions and skills with corporate IT requirements.
A vendor independent expert with over 20 years’ experience of delivering IT Recruitment, Security, Infrastructure, Compliancy, Services and Support.
- + 91 9899495990
- www.esecforte.com
- info@esecforte.com
eSecForte Technologies Private Limited is an Information Technology (IT) company whose main objects are Information Security, Trainings, Mobile Application Development, Software Automation and Testing, Optimization and customization. Having delivered projects to customers all over the world, and to, regular clients from India, US, Canada and Europe, the services are aligned to meet clients’ expectations in three separate industries:
Information Security including Network Security, Web Application Security, Ethical Hacking Trainings, Information Security Audits
Software development, customization, improvement, maintenance and testing.
Applications for mobile platforms (iPhone and Android), including dedicated and cross-platform apps; basic, complex, or contextual applications; tools to assist your daily mobile tasks; or any other type of mobile app you can think of.
- +202 22638292
- www.fixed-solutions.com
- sales@fixed-solutions.com
Fixed Solutions is a professional IT Solutions company which provides the most reliable, cost-effective, secure IT solutions and security consulting services for financial and enterprise firms. Offering Penetration Testing , IPS , WAF , Vulnerability Management, Unified Threat Management, Disaster Recovery Plans and Implementation, Compliance reporting and Complex Hosting .
- +55 11 4063 1575
- www.gcsec.com.br
- contato@gcsec.com.br
GC Security offers security and IT solutions delivered through its unique co-sourcing and outsourcing models for the complete building of Security and Network Operations Centers, including 24x7 monitoring and managed security services deployed to fill the gap between business needs, availability of IT resources and information security.
- +91 265 6562666 / 888
- www.indusfaceconsulting.com
- Nandini Tandon
Indusface Consulting Pvt. Ltd. Profile
Indusface Consulting is a profitable and debt free venture with an annual growth rate of over 150%. Through its India & overseas operations and its ISO 27001 adhered delivery centers, Indusface extends its information security based solutions and services to over 250 customers spread across various industry verticals in 12 countries across 4 continents including Fortune 500 clients. Indusface has strategic partnerships with leading global security players and with an engineering team of over 60 consultants with Information Security experience, Indusface has proven its technical and delivery excellence by 90% of its customers giving them repeat business.
- +49 (0)89 94573 0
- www.integralis.com
- de.info@integralis.com
Integralis delivers by comprehensive international know-how and a broad range of IT Security Solutions. To secure vital business processes, Integralis offers competent consulting and customized services. With over 500 employees, it generated revenues of EUR 188.2 million in 2010. Further information on Integralis is available on the Internet at www.integralis.com.
- +54 11 5278-5910
- www.intrasecurity.com.ar
- info@intrasecurity.com.ar
IntraSecurity Profile
IntraSecurity, is a company focused on deliver complete solutions to Security and Infrastructure challenges for today's modern company. With a staff of specialist and teamed with the best technological partners in the market we are committed to the mission of helping our customers to achieve their business objectives.
- +(57 1) 638 6130
- www.j2ksec.com
- contactenos@j2ksec.com
We are a company of experts in consulting services and products aimed at Information Security. We are Rapid7 Partner Resellers, located in Bogota, Colombia. Visit us at www.j2ksec.com.
- +32 (0) 496.556.580
- www.mielabelo.com/
- contactus@mielabelo.com
Mielabelo Profile
Mielabelo is an independent consulting company providing end-to-end solutions to its customers.
We help our clients:
- To Sustain and Develop Business Activities.
- To Control Cost & Improve Quality.
- To Manage Compliancy & Mitigate Risks.
Information risk management has become a key concern in a more and more IT dependent business world. Mielabelo helps its customers to keep and gain the right positioning amongst peers and manage issues based on an educated analysis of risks and compliance requirements.
- +971 4 446 5720
- www.netcure.com
- customer.service@netcure.com
Netcure Profile
Netcure’s exclusive focus during every client engagement is Information Risk Management. Our products and services all relate to three main areas of concern shared to a greater or lesser degree by all our clients. That is…
- Effective management of security threats, vulnerabilities and incidents
- Effective management of data at rest, in motion or in process
- Effective management of IT infrastructures and networking assets
- +91 80 41267681 / +91 98450 91480
- www.oaksys.net
Oak Systems Pvt. Ltd. Profile
OAK SYSTEMS PRIVATE LIMITED (OAKSYS) is a specialist software testing company based in Bangalore, India. OAKSYS is engaged in providing quality software solutions and services to prestigious clients around the world. OAKSYS is the brainchild of software technocrats with proven track record of managing & executing software assignments to the satisfaction of clients. OAKSYS has expertise in the areas of Embedded/RT applications, Avionics, Aerospace, Automotives, Client server applications, Internet based applications, Telecom, V & V. OAKSYS offers software Testing, test automation and Quality Assurance services. In addition to Software testing & test automation services, OAKSYS represents number of global testing tools in India as well as offers corporate training in Testing, QA and Project management topics.
- +1300 953 324
- www.osisecurity.com.au
OSI Security Pty Ltd. Profile
OSI Security is an independent security auditing and consulting company based in Sydney, Australia. We provide best of breed security solutions, penetration testing, vulnerability scanning and further risk mitigation services. OSI Security, securing your information assets – at every layer.
- +90 232 465 21 24
- www.promer.com.tr
Promer Bilgisayar Profile
Founded in 1990, Promer, after the period of 2000 taken in line with the strategic decisions, with nearly 8 years Promer rather than work with one to one service recipient institutions, has been involved as a solution partner by developing a successful turn-key projects , R & D and IT Security solutions (included Information Security, Security Policies, Risk Analysis, operating systems and applications software vulnerabilities detection, foreign producers to become suppliers of zeroday deficits, wired and wireless network systems on the complex penetration testing, forensic informatics and related sub-issues include consulting services) to the clients.
Promer has very strong team, both domestically and as foreign origin experts.
- +52-55-11630080 EXT 100
- www.protgt.net
- ventas@protgt.net
PROTGT S.A. DE C.V. Profile
PROTGT is a Mexican information security solutions provider, we develop consultancy services, managed services, I.T. infrastructure protection
- 86-21-5240-0198
- www.qast.com
- info@qast.com
Qast Software Group is the leading software distribution companies in China and Singapore. The company specializes in software reselling, channel & online distribution, and value-added services including marketing services, localization services, and technical supports.
Raina Solutions Profile
Acelium | a Raina company - focusing on Information Security and Compliance Management Consulting.
Acelium is committed to delivering world-class, real-world security and compliance solutions with senior expertise and proven methodologies to help enterprises assess their environments, improve their compliance postures, and secure their infrastructures.
- +55 11 5185-2818
- www.secure1.com.br
- info@secure1.com.br
Secure1 Technology is an information security solutions integrator and service provider of best of breed network, host, endpoint, database and wireless solutions and services that address the full-threat spectrum that every organization faces while doing business over the Internet.
- 00971-6 5575599
- www.sentelist.net
- info@sentelist.net
Sentelist is an IT Security Consultancy firm with specialization in IT security audits of PCI, ISO27001 etc., managed security services, security operations center (SOC), conducting compliance reviews, network architecture reviews, vulnerability assessments, ethical hacking, penetration testing, computer security incident handling and forensic investigations
Sentelist consultants have rich experience in consulting across all the vertical market platforms like Aviation, Telecom, Internet Service Providers, Managed Hosting & Security Providers, Large Corporate Banks, Government organizations, Retail industry etc. in all over middle east.
- +591-3-3576565
- www.siscotec.com
- fernando.hoyos@siscotec.com
Siscotec is a company specializes in solutions and services about Security Information and networking. We have been working in Bolivia 15 years ago and this year began operations in Lima, Peru.
Our head office is located in the city of Santa Cruz de la Sierra and we have branches in the cities of La Paz and Cochabamba.
Among the product lines that we represent are: Trend Micro, Juniper.
- + 7 495 232 00 23
- www.softline.ru
- info@softline.ru
Softline Profile
Softline has been operating in the IT market since 1993 and occupies one of the leading positions in the area of software licensing and provision of related services - IT education, consulting, legal support, technical support and IT outsourcing.
- +82 2 6052 5700
- www.softwidesec.com
- sales@softwidesec.com
Softwide Security provides comprehensive IT security solutions and services specialized but not limited to vulnerability assessment and penetration testing. Located in South Korea, we are the leading IT strategy consulting and solution provider based on automated, solution based security assessment, IT governance and compliance check.
With strategic partnering with industry leading domestic information security firms, Softwide Security provides wide range of innovative security solutions and services covering the full spectrum of information security requirements.
- +40 21 2067777
- www.tornado.ro
- sales.tornado@tornado.ro
Tornado Technology SRL Profile
Tornado is the leading Value Added Distributor for security and networking products.
We deliver high end networking and security solutions through our registered partners, supporting private and public organizations with solutions to improve their operations and increase their performance and competitiveness.
- 1-800-561-3270
- www.whitehatinc.com
- sales@whitehatinc.com
Tornado Technology SRL Profile
WhiteHat Inc. is a premier Information Security Provider dedicated to leading the IT security industry and inspiring our customers to employ industry best practices. We are a trusted partner, committed to superior customer service and delivering high value through exceptional employees, methodologies, partners and security technologies.
- +351 216 075 241
- www.willway.pt
- sales@willway.pt
Willway S.A. is a Portuguese privately held company, which operates in the Information Technology sector with a focus on IT security and IT governance. The company is dedicated to delivering services and implementing innovative solutions, whilst applying best practices in IT Governance, Risk, and Compliance.
- +54.11.60918566
- www.zconsulting.com.ar
- info@zconsulting.com.ar
ZConsulting SRL delivers Business Infrastructure and Security Technology Solutions to help companies cost-effectively reduce risk, achieve and maintain regulatory compliance and reach their security goals. Located in Argentina, our company services organizations of all sizes, from small businesses to large companies and government facilities. Along with IT Infrastructure Assessment and Deployment, ZConsulting SRL provides Managed, Monitored and Self-Service Security Services options.
MSSP's
North America
- (720) 395-5633
- Visit Website
- Mike Massimi
- (248) 837-1400
- www.sequrisgroup.com
- info@sequrisgroup.com
As a complete information technology solution provider, Sequris Group actively helps companies focus on their core business by providing IT services for network consulting, management, implementation, and training. Sequris Group’s team members have worked nationally with large businesses ranging from corporations with more than 500 employees and $100 million in annual revenues to Fortune 500 companies.
International
- +64 272 872 263
- www.AuraRedEye.com
- sales@AuraRedEye.com
Aura RedEye provides world-class managed vulnerability scanning of internal, web-facing and cloud hosted systems. RedEye is a PCI Authorised Scanning Vendor.
Aura RedEye - 24/7 MANAGED VULNERABILITY SCANNING – "we never sleep so you can"
Deloitte Asia Pacific Technology Fast 500 & Winners of the Electra Business of the Year 2010
- +44 191 211 1970
- www.calibre-secured.net
- info@calibre-secured.net
Calibre provides world class consulting in the communications and security arena. Creating a vital bridge for business leaders to access highly qualified industry certified advice without the usual technical jargon. We provide a comprehensive array of information assurance services to our clients. These services range from penetration testing & vulnerability assessment, through to secure remote working solutions, managed security solutions, CLAS consultancy and specialist complex network design.
- +91 265 6562666 / 888
- www.indusfaceconsulting.com
- Nandini Tandon
Indusface Consulting is a profitable and debt free venture with an annual growth rate of over 150%. Through its India & overseas operations and its ISO 27001 adhered delivery centers, Indusface extends its information security based solutions and services to over 250 customers spread across various industry verticals in 12 countries across 4 continents including Fortune 500 clients. Indusface has strategic partnerships with leading global security players and with an engineering team of over 60 consultants with Information Security experience, Indusface has proven its technical and delivery excellence by 90% of its customers giving them repeat business.
- Request DemoSee Rapid7 in Action
- Download
Free TrialTest Drive Nexpose Now - Call Us866.7RAPID7
866.772.7437
-
Become a PartnerLearn more about the Rapid7 PartnerFirst Program
Sign Up Now

