Cybersecurity management platform company Skybox Security Inc. today announced the next generation of its Continuous Exposure Management Platform that includes advancements to its Attack Surface and Vulnerability Management solutions.

Version 13.0 of the Skybox Security platform includes an enhanced Attack Surface Management solution that it claims delivers a comprehensive inventory and map of assets, applications and users. It analyzes attack paths and simulates attacks to deliver a dynamic security model of the hybrid attack surface.

Key features of the news release include a new Attack Surface Map that delivers new ways to visualize, navigate and interact with the attack surface map. Skybox Security customers can now filter and highlight specific segments of their infrastructure, with assets grouped manually or automatically for enhanced comprehensibility. An improved search feature delivers rapid asset location and navigation.

The new release features enhanced Attack Path Analysis that allows users to understand the importance of lateral attacks, threats from supply chain partners and inside threats. Version 13.0 now includes the threat origin in its attack path analysis, allowing companies to know where threats originate to drive better prioritization and mitigation decision-making through better risk context.

13.0 also comes with lightweight directory access protocol integration, allowing organizations to seamlessly model Group Policy Objects from LDAP directories such as Microsoft Active Directory within the Skybox platform. The integration provides direct insights into security policy settings for users, organizational units and computers.

The release includes enhanced Cloud Infrastructure Integration to address the challenges posed by hybrid and cloud infrastructures. Version 13.0 centralizes cloud-related data, including Amazon Web Services Inc. firewall rules and assets.

Vulnerability Management also gets a look-in, with the solution now aggregating more than 25 third-party threat intelligence feeds, combined with the in-house Skybox Threat Intelligence feed, to help prioritize threats with exposure-based risk.

Customers can now import vulnerability data to consolidate data from various sources within the platform to establish a single solution for vulnerability management activities. A new “Solutions View” in the release is designed to identify essential compensating controls tailored to specific business units or applications. Version 13.0 also integrates seamlessly with Security Orchestration, Automation, and Response platforms through a set of focused REST application programming interfaces.

“In today’s complex threat landscape, organizations need to continuously manage their threat exposure based on the prioritized risks to their business,” Chief Executive Mordecai Rosen said ahead of the release. “The Skybox platform now supports each stage of an enterprise’s continuous exposure management program, from mapping the attack surface, through contextualization and risk-based prioritization, to final remediation.”

Skybox Security is a venture capital-backed startup, having last raised $50 million in funding in February. Investors in the company include J.P. Morgan Chase & Co., CVC Capital Partners Growth Funds L.P. and Pantheon Ventures LLC.

Image: Skybox Security