Vendor provides threat-hunting, incident-response expertise
Count Flashpoint as the latest player in the cybersecurity space to provide managed security service providers (MSSPs) with tools to help them help their SMB customers through more proactive business risk intelligence (BRI) capabilities.
The Lowdown: The vendor is enabling MSSPs to take advantage of its broad BRI technologies, including its Flashpoint Intelligence Platform and technical intelligence.
The Details: MSSPs and SMBs share some of the same challenges when it comes to security, including limited capabilities in key areas like threat hunting and incident response, according to Flashpoint officials. MSSPs can now leverage the company’s ability to track bad actors via online communities and other open and dark web sources.
Among the Flashpoint capabilities MSSPs have access to are:
> Flashpoint Intelligence Platform: Collects Flashpoint’s technical data, vulnerability information, and intelligence reports. MSSPs can use all this to run research on threat actors and risks that will help drive various actions and mitigate risk.
> Technical intelligence: Delivers information on indicators of compromise, including malicious IP addresses and domains, YARA rules for identify malware and other files, and MD5 and other hashes.
> Alerting: Informs MSSPs when compromised data is found or information relevant to them or their customers is detected in discussions among threat actors in online communities. The alerts are available in the Flashpoint Intelligence Platform.
> Vulnerability prioritization and management: Leverages information gleaned via discussions among cybercriminals to drive patching prioritization decisions through Flashpoint’s CVE dashboard.
> Flashpoint API: Integrates data from the vendor into security information and event management (SIEM) solutions, firewalls, and orchestration platforms, and offers access to Flashpoint reports, technical data, and conversations from threat-actor communications.
The Impact: SMBs and other organizations are increasingly leaning on MSSPs for help in an increasing complex security environment that includes highly sophisticated attackers and an IT environment that’s becoming more distributed. MarketsandMarkets analysts forecast the global managed security service market to grow from $24 billion in 2019 to $47.6 billion by 2024. Given all this, players in the cybersecurity space – most recently SonicWall – are looking to bolster MSSPs’ capabilities.
The Buzz: “Managed security service providers increasingly require comprehensive solutions that parallel what Flashpoint’s Business Risk Intelligence encompasses,” said Ayesha Prakash, head of global channels and partnerships at Flashpoint. “Flashpoint’s prioritization of MSSPs as a key component of our channel offering meets their needs for data and intelligence from illicit online communities and demonstrates our ability to support businesses of all sizes.”