Verodin Security Instrumentation Platform

SIP instruments customer IT environments to test the effectiveness of network, endpoint, email and cloud controls. SIP continuously executes tests and analyzes the results to proactively alert on drift from a known-good baseline and validate control configuration. SIP provides evidence demonstrating if a customer's controls are actually delivering the desired business outcomes. Features: Network Controls Network controls are controls inspecting network traffic (e.g. IDS, IPS, NGFW, etc.). To safely test production IT environments, Network Actors act as both the source and destination of a test, sending traffic between each other to see how the network control responds. These tests include segmentation and policy validation, malicious file transfer, C2, data exfiltration, etc. Verodin SIP is the only platform that is able to safely leverage real malware and real attack bytes to provide 100% reliability of test results. Verodin Network Actors are deployed within a customer’s business zones and are available as a virtual machine, physical appliance or installable software. Endpoint Controls Endpoint controls are implemented to protect the host. Endpoint Actors are installed directly onto a customer’s “gold images” in the production IT environment. There is no need to install Endpoint Actors on every endpoint, simply a sampling of systems that represent deployed endpoint and user configurations. Endpoint Actors execute tests within the context of a user to validate access to resources, attempt privilege escalation, exfiltrate data and perform other behaviors across the Cyber Kill Chain. Tests can leverage all aspects of the endpoint’s operating system, including the CLI and even Powershell for Windows endpoints. Endpoint Actors can be installed onto Windows, Mac and Linux endpoints. Email Controls Email controls are designed to stop inbound phishing, emails containing malware and data leaving the production IT environment. The Verodin SIP Email Theater module enables Network Actors to test customer email controls, including on-premises Microsoft Exchange, Office 365 and other email platforms. Cloud Controls Verodin SIP Actors are able to test cloud controls, including commonly deployed AWS and Azure controls. Virtual host and API options are available, depending on the cloud platform and service offering being tested.