AlienVault Beefs Up Security Platform with EDR

**Editor’s Note: Click here for our recently compiled list of new products and services.**

AlienVault, which is being acquired by AT&T, has added endpoint detection and response (EDR) capabilities to its unified security management platform, USM Anywhere.

AlienVault’s Mike LaPeters

USM Anywhere automates threat detection and response wherever threats appear, across endpoints and networks in cloud and on-premises environments — all from one platform. The platform is powered by continuous threat intelligence from the AlienVault Labs security research team, allowing it to detect aggressive threats, especially those designed to evade detection by traditional perimeter security and signature-based detection techniques, the company said.

Mike LaPeters, AlienVault’s vice president of global channel sales, tells Channel Partners that adding EDR functionality to the platform means his company’s partners now have an “enhanced arsenal to help their customers be more secure.”

“Our reseller partners now can offer EDR functionality without needing to add yet another point product to an already complex set of tools,” he said. “The USM platform is now even better positioned to help customers improve their security posture. Our managed services partners (MSSPs) do not need to integrate another product into their services platform to offer the value of EDR to their customers. They have the option to add EDR functionality into their service offering and increase their margins significantly without increasing their costs.”

EDR as a technology isn’t offered by every MSSP because of its inherent complexity, LaPeters said.

AlienVault’s Sanjay Ramnath

“AlienVault’s addition of EDR into the USM platform brings the power of EDR into an easy-to-use platform,” he said. “Partners can now efficiently deliver EDR services to their customers without needing additional technology or costs.”

Sanjay Ramnath, AlienVault’s vice president of product marketing, said users not only can detect threats earlier and with more accuracy, but also investigate and contain threats faster across their entire environment. Additional features include built-in file integrity monitoring to accelerate compliance efforts, proactive queries for risk mitigation, and log aggregation to simplify security operations, according to the company.

“The new EDR capabilities in USM Anywhere allow my team of security analysts to simplify and cost-effectively provide 24/7 monitoring of all endpoint devices as part of our managed security services, giving our customers greater peace of mind,” said Jorge Colon, security operations technical lead for Abacode. “Not only does USM Anywhere help us to better track endpoints across different environments, but built-in threat intelligence automates threat detection so we can focus on rapid response.”