-

Halo Security Platform Now Offers Visibility to the Vulnerabilities That Matter Most

New capability helps security teams understand their full attack surface, reduce noise and alert fatigue

SAN FRANCISCO--(BUSINESS WIRE)--The number of common vulnerabilities and exposures (CVEs) has grown each year since 2016, leaving security teams exceedingly burdened and constantly chasing vulnerabilities that may be considered low priority to them. Halo Security recently implemented a new feature to reduce the noise and improve attack surface visibility, helping customers identify active threats in the wild — known exploited vulnerabilities (KEVs) from the Cybersecurity and Infrastructure Security Agency (CISA) catalog — and giving them better insight into their own risk.

According to CISA, less than 4% of CVEs are actually exploited. This new feature, which is available to all Halo Security customers at no added cost, gives better visibility to that 4% attackers have actually weaponized in real-world attacks.

“The sheer volume of CVEs can be overwhelming and when organizations don't know which vulnerabilities to prioritize, they end up on a wild goose chase,” said Nick Merritt, Vice President of Security and Products at Halo Security. “Our new KEV feature helps security teams understand their full attack surface by alerting them to only the most relevant threats — saving time, reducing noise, and improving security posture.”

With this new feature, a red banner will appear at the top of the Halo platform to alert users when KEVs have been identified and all found vulnerabilities can easily be filtered and sorted based on this data. This helps security teams prioritize remediation and better understand their true attack surface.

The KEV feature seamlessly integrates with Halo Security’s other offerings, including asset discovery, risk and vulnerability assessment, application scanning, and penetration testing.

Learn more about how the KEV feature offers relief to overworked security teams.

About Halo Security

Halo Security is a complete attack surface management platform, offering asset discovery, risk and vulnerability assessment, and penetration testing services in a unified, easy-to-use dashboard. Founded by experienced and trusted penetration testers, scanning leaders, and reformed hackers, Halo Security brings the attacker’s perspective to the modern organization. Halo Security’s leadership team has held key roles at McAfee, Intel, Kenna Security, OneLogin, and WhiteHat Security. Learn more at halosecurity.com.

Contacts

Gregory FCA for Halo Security
Karen Hamill
703.774.6925
HaloSecurity@gregoryfca.com

Halo Security


Release Versions

Contacts

Gregory FCA for Halo Security
Karen Hamill
703.774.6925
HaloSecurity@gregoryfca.com

More News From Halo Security

Halo Security Now Detects API Keys and Secrets Exposed in JavaScript

SAN FRANCISCO--(BUSINESS WIRE)--Web properties are increasingly relying on third-party JavaScript to increase functionality, but this can also bring inherent risks. A report from Source Defense, which scanned the 4,300 highest-trafficked websites globally, found an average of four third-party scripts per page. Often, these tags are added without proper security controls or oversight from security teams, giving attackers an easy way to find exposed API keys and breach sites. Halo Security, a lea...

TrustedSite, Halo Security Announce Passing of Co-Founder and CEO Tim Dowling

MIAMI BEACH, Fla.--(BUSINESS WIRE)--With deep sadness, TrustedSite and Halo Security announce the passing of its co-founder and CEO, Tim Dowling, after a courageous battle with ampullary adenocarcinoma, a rare pancreatic cancer. He was 59. Dowling was a man of great faith. He was a lifelong sailor and golfer who embodied the traits necessary to persevere and succeed — deep knowledge, mental toughness, and the ability to fully commit to the adventure. ”Practice makes perfect” was his motto, with...

Halo Security Launches Full Attack Surface Management Platform Led By Veterans of Intel and McAfee

LAS VEGAS--(BUSINESS WIRE)--TrustedSite, a leading provider of vulnerability scanning and certification, officially launched Halo Security at Black Hat USA. The company’s attack surface management platform combines external asset risk and vulnerability assessment, and penetration testing services to provide organizations complete visibility into the risk posture of their internet-exposed assets on an on-going basis. Led by experienced penetration testers, scanning leaders and reformed hackers,...
Back to Newsroom