Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Analytics

PatchLink Buys SecureWave

Deal merges endpoint security with patch management, vulnerability assessment

PatchLink yesterday acquired endpoint security vendor SecureWave, paving the way for a combined offering that might make it easier for enterprises to manage client security.

Terms of the all-stock deal between the two private companies were not disclosed.

SecureWave's Sanctuary is a policy enforcement suite that uses whitelisting to enable only authorized applications to run and only authorized devices to connect to laptops, PCs, or servers. These capabilities, combined with PatchLink’s patch and vulnerability management products, will make it easier to proactively enforce application and device security policies and automatically patch and remediate vulnerabilities across an entire IT infrastructure, the partners say.

"The key phrase we're using is 'unified protection and control,' " says Dennis Szerszen, senior vice president at SecureWave. "Most of our customers have a number of different security agents they're using at the client, from antivirus to security control to vulnerability assessment. One of the things we can do [in this merger] is try to flatten the desktop infrastructure and deliver one unified agent, and maybe one console for managing policy."

PatchLink offers tools for assessing vulnerability at the endpoint and patching it, the partners say. SecureWave offers tools for protecting the endpoint from unauthorized access and enforcing security policy at the client. Together, the two companies could create a suite of tools to help enterprises find the weaknesses in their endpoints, patch or protect them, then ensure that end users continue to follow security policies, they say.

Collectively, the two companies already have nearly 5,000 customers, and their products protect some 14 million endpoints, the executives say. The companies have virtually no overlap between their product lines, and both rely heavily on the reseller channel for most sales.

Together, the two companies also have significant security management capabilities, but the combined organization has no plans to compete with security information management vendors, Szerszen says. (See A Multitude of SIMs.)

"What they are doing is event management and correlation, and that's not what we're talking about here," he states. "We're focused on security management from a policy enforcement perspective."

The deal is subject to the approval of SecureWave shareholders and is expected to be completed "in coming weeks," the partners say.

— Tim Wilson, Site Editor, Dark Reading

  • PatchLink Corp.
  • SecureWave S.A.

    Tim Wilson is Editor in Chief and co-founder of Dark Reading.com, UBM Tech's online community for information security professionals. He is responsible for managing the site, assigning and editing content, and writing breaking news stories. Wilson has been recognized as one ... View Full Bio

    Comment  | 
    Print  | 
    More Insights
  • Comments
    Newest First  |  Oldest First  |  Threaded View
    Where Businesses Waste Endpoint Security Budgets
    Kelly Sheridan, Staff Editor, Dark Reading,  7/15/2019
    US Mayors Commit to Just Saying No to Ransomware
    Robert Lemos, Contributing Writer,  7/16/2019
    Register for Dark Reading Newsletters
    White Papers
    Video
    Cartoon Contest
    Current Issue
    Building and Managing an IT Security Operations Program
    As cyber threats grow, many organizations are building security operations centers (SOCs) to improve their defenses. In this Tech Digest you will learn tips on how to get the most out of a SOC in your organization - and what to do if you can't afford to build one.
    Flash Poll
    The State of IT Operations and Cybersecurity Operations
    The State of IT Operations and Cybersecurity Operations
    Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
    Twitter Feed
    Dark Reading - Bug Report
    Bug Report
    Enterprise Vulnerabilities
    From DHS/US-CERT's National Vulnerability Database
    CVE-2019-14230
    PUBLISHED: 2019-07-21
    An issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.7 for WordPress. One could exploit the id parameter in the set_count ajax nopriv handler due to there being no sanitization prior to use in a SQL query in saveQuestionVote. This allows an unauthenticated/unprivileged user ...
    CVE-2019-14231
    PUBLISHED: 2019-07-21
    An issue was discovered in the Viral Quiz Maker - OnionBuzz plugin before 1.2.2 for WordPress. One could exploit the points parameter in the ob_get_results ajax nopriv handler due to there being no sanitization prior to use in a SQL query in getResultByPointsTrivia. This allows an unauthenticated/un...
    CVE-2019-14207
    PUBLISHED: 2019-07-21
    An issue was discovered in Foxit PhantomPDF before 8.3.11. The application could crash when calling the clone function due to an endless loop resulting from confusing relationships between a child and parent object (caused by an append error).
    CVE-2019-14208
    PUBLISHED: 2019-07-21
    An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to a NULL pointer dereference and crash when getting a PDF object from a document, or parsing a certain portfolio that contains a null dictionary.
    CVE-2019-14209
    PUBLISHED: 2019-07-21
    An issue was discovered in Foxit PhantomPDF before 8.3.10. The application could be exposed to Heap Corruption due to data desynchrony when adding AcroForm.