Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Analytics

2/27/2012
07:34 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Rapid7 And Modulo Deliver Integrated Vulnerability Risk And IT GRC Solutions To Empower Risk Management Programs

As part of the alliance, the companies also announced that penetration testing risk data will be integrated in Q3 2012

SAN FRANCISCO--(BUSINESS WIRE)--Rapid7 and Modulo today announced they are working together to deliver an holistic view of threat and vulnerability risk, correlated with broader regulatory, policy and compliance risk analysis. The integrated solution enables organizations to identify and manage business impacts as part of a risk management program. As part of the alliance, the companies also announced that penetration testing risk data will be integrated in Q3 2012.

“By bringing together two world-class risk and compliance solutions, we are providing our customers around the world with the contextual business intelligence they need to understand and effectively manage their security risk posture,” said Sheldon Malm, head of strategic partners and alliances, Rapid7. “The combination of Nexpose and Risk Manager delivers a tightly integrated solution that is actionable, intuitive, and truly simplifies the customer experience.”

Today’s organizations require top-down visibility of risk to their assets and business operations. Yet there is no unified way of reporting all IT risks across the vast and layered landscape of security and risk tools, or rating scale for ranking problems. Modulo and Rapid7 have addressed this challenge with a seamlessly integrated business process workflow between Rapid7 Nexpose and Modulo Risk Manager, enabling customers to organize and prioritize thousands of assets and quickly focus on the items that pose the greatest risk to their business.

Benefits of the joint Rapid7 and Modulo offering include:

Common Repository to Manage all GRC Processes: Perform optimized gap analyses, produce business-related enterprise risk profiles and customized scoring, and prioritize investments according to each asset's potential impact and importance to the organization Continuous Discovery of Virtualized Assets: Native integration with VMware vCenter that enables Nexpose to deliver accurate visibility of all virtual assets and their threat exposure Rapid7 Real RiskTM: Clear insight into the real risk of each unique environment by incorporating information on Exploit Exposure, Malware Exposure, temporal and weighted risk scores as well as CVSS rankings Eliminate Redundant Costs and Controls: Modulo Risk Manager is delivered out-of-the-box with one of the industry’s most extensive knowledge bases of content cross-mapped with the latest sources of risk, mitigation and multi-regulatory compliance including Sox, PCI, HIPAA, GLBA, FISMA, BASEL II, ISO 27001, BS-25999, COBIT, Shared Assessments and more. Unrivaled Breadth of Vulnerability Scanning: Scans for over 22,000 vulnerabilities with more than 75,000 vulnerability checks in networks, operating systems, Web applications and databases across a wide range of platforms

“Hundreds of organizations worldwide choose Modulo Risk Manager due to our comprehensive out-of-the box capabilities. By automating GRC processes and reporting, we help them improve their accuracy and achieve dramatic cost savings. Our joint solution with Rapid7 gives customers a unified framework and dashboard that amplifies this value proposition and reduces overall business risk,” said Terence Lee, managing director, North America at Modulo.

The joint solution feeds detailed asset identification and scanning results from across the entire IT environment – including web, network, applications and databases – into a broader IT risk analysis process. Customers can identify how vulnerabilities present risk to specific business operations, processes, and strategic or tactical activities. They can then manage those exposures through remediation workflow.

The validity of these risk scenarios will be further enhanced by executing an advanced penetration test to validate reported exposures and help prioritize remediation steps. Modulo will integrate Metasploit' Professional with Modulo Risk Manager in Q3 2012.

Supporting Links

Twitter: @rapid7

Twitter: @moduloitgrc

Blog: https://community.rapid7.com/community/infosec/blog

About Rapid7

Rapid7 is the leading provider of security risk intelligence solutions. Rapid7's integrated vulnerability management and penetration testing products, Nexpose and Metasploit, empower organizations to obtain accurate, actionable and contextual intelligence into their threat and risk posture. Rapid7's solutions are being used by more than 2,000 enterprises and government agencies in more than 65 countries worldwide, while the Company's free products are downloaded more than one million times per year and enhanced further by over 125,000 security community users and contributors. Rapid7 has been recognized as one of the fastest growing security companies by Inc. Magazine and as a “Top Place to Work” by the Boston Globe. The Company is backed by Bain Capital Ventures and Technology Crossover Ventures. For more information about Rapid7, please visit http://www.rapid7.com.

About Modulo

Modulo Security, LLC is a leading global enterprise provider of comprehensive Governance, Risk and Compliance (GRC) management solutions. Modulo’s award-winning Risk Manager™ provides hundreds of organizations worldwide with the tools they need to automate the entire GRC management process to monitor, manage and sustain adherence to policy and regulations while reducing enterprise risk and complexity. Customers span the financial, health care, retail, telecom, power & gas and government sectors and include BASF, BC Hydro, Commercial Bank of Dubai, Microsoft, New York University Medical Center, Synovus Financial, and Schlumberger. Modulo Risk Manager has earned “Best Buy” and “5-Star” ratings in SC Magazine’s 2011 Risk Management group product review and is the winner of the 2011 & 2010 Info Security Products Guide Global Excellence Award, 2010 Network Products Guide Product Innovation Award and 2011 & 2010 SC Magazine Excellence Award Finalist. Visit www.modulo.com and follow Modulo on Twitter @moduloitgrc for more information.

Comment  | 
Print  | 
More Insights
Comments
Oldest First  |  Newest First  |  Threaded View
Edge-DRsplash-10-edge-articles
7 Old IT Things Every New InfoSec Pro Should Know
Joan Goodchild, Staff Editor,  4/20/2021
News
Cloud-Native Businesses Struggle With Security
Robert Lemos, Contributing Writer,  5/6/2021
Commentary
Defending Against Web Scraping Attacks
Rob Simon, Principal Security Consultant at TrustedSec,  5/7/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-29623
PUBLISHED: 2021-05-13
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A read of uninitialized memory was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying th...
CVE-2021-32917
PUBLISHED: 2021-05-13
An issue was discovered in Prosody before 0.11.9. The proxy65 component allows open access by default, even if neither of the users has an XMPP account on the local server, allowing unrestricted use of the server's bandwidth.
CVE-2021-32918
PUBLISHED: 2021-05-13
An issue was discovered in Prosody before 0.11.9. Default settings are susceptible to remote unauthenticated denial-of-service (DoS) attacks via memory exhaustion when running under Lua 5.2 or Lua 5.3.
CVE-2021-32919
PUBLISHED: 2021-05-13
An issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback option in mod_dialback enables an experimental feature for server-to-server authentication. It does not correctly authenticate remote server certificates, allowing a remote server to impersonate another serv...
CVE-2021-32920
PUBLISHED: 2021-05-13
Prosody before 0.11.9 allows Uncontrolled CPU Consumption via a flood of SSL/TLS renegotiation requests.