Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Analytics

2/27/2012
07:34 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Rapid7 And Modulo Deliver Integrated Vulnerability Risk And IT GRC Solutions To Empower Risk Management Programs

As part of the alliance, the companies also announced that penetration testing risk data will be integrated in Q3 2012

SAN FRANCISCO--(BUSINESS WIRE)--Rapid7 and Modulo today announced they are working together to deliver an holistic view of threat and vulnerability risk, correlated with broader regulatory, policy and compliance risk analysis. The integrated solution enables organizations to identify and manage business impacts as part of a risk management program. As part of the alliance, the companies also announced that penetration testing risk data will be integrated in Q3 2012.

“By bringing together two world-class risk and compliance solutions, we are providing our customers around the world with the contextual business intelligence they need to understand and effectively manage their security risk posture,” said Sheldon Malm, head of strategic partners and alliances, Rapid7. “The combination of Nexpose and Risk Manager delivers a tightly integrated solution that is actionable, intuitive, and truly simplifies the customer experience.”

Today’s organizations require top-down visibility of risk to their assets and business operations. Yet there is no unified way of reporting all IT risks across the vast and layered landscape of security and risk tools, or rating scale for ranking problems. Modulo and Rapid7 have addressed this challenge with a seamlessly integrated business process workflow between Rapid7 Nexpose and Modulo Risk Manager, enabling customers to organize and prioritize thousands of assets and quickly focus on the items that pose the greatest risk to their business.

Benefits of the joint Rapid7 and Modulo offering include:

Common Repository to Manage all GRC Processes: Perform optimized gap analyses, produce business-related enterprise risk profiles and customized scoring, and prioritize investments according to each asset's potential impact and importance to the organization Continuous Discovery of Virtualized Assets: Native integration with VMware vCenter that enables Nexpose to deliver accurate visibility of all virtual assets and their threat exposure Rapid7 Real RiskTM: Clear insight into the real risk of each unique environment by incorporating information on Exploit Exposure, Malware Exposure, temporal and weighted risk scores as well as CVSS rankings Eliminate Redundant Costs and Controls: Modulo Risk Manager is delivered out-of-the-box with one of the industry’s most extensive knowledge bases of content cross-mapped with the latest sources of risk, mitigation and multi-regulatory compliance including Sox, PCI, HIPAA, GLBA, FISMA, BASEL II, ISO 27001, BS-25999, COBIT, Shared Assessments and more. Unrivaled Breadth of Vulnerability Scanning: Scans for over 22,000 vulnerabilities with more than 75,000 vulnerability checks in networks, operating systems, Web applications and databases across a wide range of platforms

“Hundreds of organizations worldwide choose Modulo Risk Manager due to our comprehensive out-of-the box capabilities. By automating GRC processes and reporting, we help them improve their accuracy and achieve dramatic cost savings. Our joint solution with Rapid7 gives customers a unified framework and dashboard that amplifies this value proposition and reduces overall business risk,” said Terence Lee, managing director, North America at Modulo.

The joint solution feeds detailed asset identification and scanning results from across the entire IT environment – including web, network, applications and databases – into a broader IT risk analysis process. Customers can identify how vulnerabilities present risk to specific business operations, processes, and strategic or tactical activities. They can then manage those exposures through remediation workflow.

The validity of these risk scenarios will be further enhanced by executing an advanced penetration test to validate reported exposures and help prioritize remediation steps. Modulo will integrate Metasploit' Professional with Modulo Risk Manager in Q3 2012.

Supporting Links

Twitter: @rapid7

Twitter: @moduloitgrc

Blog: https://community.rapid7.com/community/infosec/blog

About Rapid7

Rapid7 is the leading provider of security risk intelligence solutions. Rapid7's integrated vulnerability management and penetration testing products, Nexpose and Metasploit, empower organizations to obtain accurate, actionable and contextual intelligence into their threat and risk posture. Rapid7's solutions are being used by more than 2,000 enterprises and government agencies in more than 65 countries worldwide, while the Company's free products are downloaded more than one million times per year and enhanced further by over 125,000 security community users and contributors. Rapid7 has been recognized as one of the fastest growing security companies by Inc. Magazine and as a “Top Place to Work” by the Boston Globe. The Company is backed by Bain Capital Ventures and Technology Crossover Ventures. For more information about Rapid7, please visit http://www.rapid7.com.

About Modulo

Modulo Security, LLC is a leading global enterprise provider of comprehensive Governance, Risk and Compliance (GRC) management solutions. Modulo’s award-winning Risk Manager™ provides hundreds of organizations worldwide with the tools they need to automate the entire GRC management process to monitor, manage and sustain adherence to policy and regulations while reducing enterprise risk and complexity. Customers span the financial, health care, retail, telecom, power & gas and government sectors and include BASF, BC Hydro, Commercial Bank of Dubai, Microsoft, New York University Medical Center, Synovus Financial, and Schlumberger. Modulo Risk Manager has earned “Best Buy” and “5-Star” ratings in SC Magazine’s 2011 Risk Management group product review and is the winner of the 2011 & 2010 Info Security Products Guide Global Excellence Award, 2010 Network Products Guide Product Innovation Award and 2011 & 2010 SC Magazine Excellence Award Finalist. Visit www.modulo.com and follow Modulo on Twitter @moduloitgrc for more information.

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
News
FluBot Malware's Rapid Spread May Soon Hit US Phones
Kelly Sheridan, Staff Editor, Dark Reading,  4/28/2021
Slideshows
7 Modern-Day Cybersecurity Realities
Steve Zurier, Contributing Writer,  4/30/2021
Commentary
How to Secure Employees' Home Wi-Fi Networks
Bert Kashyap, CEO and Co-Founder at SecureW2,  4/28/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-32077
PUBLISHED: 2021-05-06
Primary Source Verification in VerityStream MSOW Solutions before 3.1.1 allows an anonymous internet user to discover Social Security Number (SSN) values via a brute-force attack on a (sometimes hidden) search field, because the last four SSN digits are part of the supported combination of search se...
CVE-2020-23263
PUBLISHED: 2021-05-06
Persistent Cross-site scripting vulnerability on Fork CMS version 5.8.2 allows remote attackers to inject arbitrary Javascript code via the "navigation_title" parameter and the "title" parameter in /private/en/pages/add.
CVE-2020-23264
PUBLISHED: 2021-05-06
Cross-site request forgery (CSRF) in Fork-CMS before 5.8.2 allow remote attackers to hijack the authentication of logged administrators.
CVE-2021-27941
PUBLISHED: 2021-05-06
Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application (through 4.9.2 on Android and through 4.9.1 on iOS) allows a physically proximate attacker to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the...
CVE-2021-29203
PUBLISHED: 2021-05-06
A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands, gai...