Israeli attack surface management startup Ionix Inc. today announced the launch of Cloud Exposure Validator, a new tool to help security teams manage alerts generated by cloud security platforms.

The Validator analyzes and reprioritizes alerts from cloud security tools, such as those from Wiz Inc. and Palo Alto Networks Inc., based on actual exploitation and severity. The result gives organizations the ability to allocate resources to address the most critical issues first.

The problem Cloud Exposure Validator is seeking to address is a well-known one: chief information security officers and teams struggling with the expanding use of the cloud and the dynamic nature of cloud infrastructure leading to an increased attack surface. Added to the mix is the problem where silos are created by different teams to address vulnerability management and cloud security, adding an overwhelming volume of alerts and vulnerabilities with no way to prioritize these to a manageable level.

Ionix Cloud Expsure Validator aims to address these issues by allowing CISOs and their team to integrate exposure management with cloud security tools. By enriching findings with exploitable vulnerability and contextual attack surface information, security teams can prioritize alerts that represent actual risk. Notably, the solution can also redefine low-risk findings as high or critical and validate that high-risk findings may not have external exposure and can therefore be ignored, the company says.

Ionix claims early users of the new service have found that most of their cloud security findings for internet-facing assets can be reprioritized. Through the integration with Ionix external exposure data, the company delivers a unified security assessment for on-premises and cloud environments. That allows security teams to correlate security signals coming from multiple tools and teams into one central source for validating external risk.

Key benefits of the Ionix Cloud Exposure Validator include enhanced prioritization of security incidents. With the integration of Ionix insights, the idea is that security teams can focus on the most critical and exploitable vulnerabilities, effectively optimizing resource allocation across cloud and on-premises infrastructure.

The Validator also provides contextual intelligence, offering a holistic view of an organization’s external attack surface that allows teams to understand how broader factors influence identified vulnerabilities. The result leads to more informed decisions about their security posture, regardless of whether the infrastructure is cloud-based, hybrid or on-premises.

Another feature, operational efficiency, sees the Validator reduce false positives and noise from security alerts. The service unifies visibility across different domains, bridging gaps between various security tools and teams.

“The Ionix Validator brings all of the capabilities of exposure management, prioritization and validation, streamlining operational challenges to help separate real cloud threats from noise,” said Chief Executive Marc Gaffan. “Now, both cloud and vulnerability management teams can make more informed decisions on how to best use resources to protect assets across the complete attack surface effectively.”

Ionix, which was previously known as Cyberpion, is a venture capital-backed startup that has raised $50.3 million in funding, according to Tracxn. Investors in the company include U.S. Venture Partners LP, Team8 Capital and Hyperwise Ventures Inc.

Image: SiliconANGLE/Ideogram