The Solution

Expanse has developed a new way to approach problems by partnering with global Internet service providers to join observed Internet traffic data associated with your networks with our active sensing data. By unifying these types of data, our platform helps you have a comprehensive view of your assets and what they are talking to. This is a fundamental shift from the prior art, which was to leverage humans to scrutinize network traffic wherever local sensors were dropped. Behavior discovers, tracks, and notifies you of risky and policy-violating activity from your network, all without agents or instrumentation.

Some Key Uses

Behavior detects communications to and from your Internet-connected assets that may indicate policy violations or potential compromise of an asset, including:

• Connections to risky services like Tor or BitTorrent
• Connections to risky or prohibited geographies or countries, like those prohibited by the OFAC
• Use of problematic, risky, or prohibited software, like P2P sharing applications
• Known command-and-control traffic and communications with device types that are commonly compromised or used as command-and-control servers.

Benefits:

• Passively uncover suspicious or risky activity to and from assets on your network
• Validate whether security and access policies are being followed
• Identify assets communicating with Tor networks, command-and-control servers, and geographies that may be prohibited

Expanse Expander provides automated, machine-speed discovery, monitoring, and tracking of your global Internet attack surface, identifying new, existing, and unknown assets both on your network and in the cloud. These capabilities ensure that security and IT operations teams can confidently identify and protect your Internet-connected assets.

The Solution

Expanse observes and collects data about every device connected to the Internet, intelligently identifying and attributing assets to customers. Expander maintains the inventory associated with a given organization and alerts to unexpected, unknown, or risky IT assets that appear anywhere in the world. Expanse combines a current and historical index of every asset on the public Internet with other facts to identify assets, exposures, errors, and policy deviations. Armed with this understanding, IT operations and security staff can:

• Monitor, track, and report on their complete global Internet attack surface
• Secure previously unknown or unmonitored assets by bringing them under IT control
• Quantify risks that Internet-connected devices pose to your organization
• Take action to reduce risk before damage occurs
• Improve effectiveness and efficiency of security policies and IT operations

Expander Benefits Maintain a continuously up-to-date inventory of all Internet-connected assets Identify cloud and on-prem assets that do not comply with company policy Prioritize exposures for remediation based on risk Track digital assets such as certificates, domains, and their registrations Integrate asset context into existing security tools via API