Cybersecurity company CrowdStrike Holdings Inc. today announced new capabilities for its CrowdStrike Falcon Exposure Management offering that accelerate cybersecurity consolidation by eliminating outdated vulnerability management tools and extending artificial intelligence-powered risk prioritization to network assets.

The new capabilities include the general availability of Network Vulnerability Assessment, a service that allows security operations teams to identify and remediate high-risk vulnerabilities in network devices, including routers, switches and firewalls, in real time.

Falcon Exposure Management is designed to prioritize vulnerabilities based on adversary activity and real-world attack paths and hence allows security teams to identify and mitigate risks before they lead to a breach. Core to the offering is giving SecOps team members an understanding of how attackers exploit multiple vulnerabilities in sequence, with the result, said by CrowdStrike, to reduce critical vulnerabilities by 98%.

With Network Vulnerability Assessment, CrowdStrike extends the platform’s capabilities to assets discovered over the network to provide risk visibility, prioritization and automated remediation across the entire attack surface without requiring additional scanners, agents or hardware. The new feature helps organizations accelerate consolidation and eliminate the costs and complexity of managing numerous disjointed tools.

“For too long, organizations have had to rely on hardware-dependent, difficult-to-deploy solutions with outdated risk models and static CVSS scores, requiring external threat feeds to even attempt prioritization,” said Chief Technology Officer Elia Zaitsev. “With the Falcon platform, everything is built in natively — the industry’s richest adversary intelligence, patented AI and a lightweight agent adapted as a network scanner — allowing teams to extend adversary-based risk mitigation to network devices with a single click, meeting the demand for even greater consolidation on CrowdStrike.”

Falcon Exposure Management offers real-time, continuous network assessments through its lightweight agent, eliminating the need for traditional scanners and providing instant visibility into all devices without disruption. The service, through its AI-driven ExPRT.AI engine, prioritizes the top 5% of vulnerabilities responsible for the majority of risks. In doing so, it helps organizations focus on the most critical threats based on real-world intelligence and adversary behavior.

The platform also unifies exposure management across endpoints, cloud, information technology, internet of things, and network assets, mapping attack paths to critical data and predicting attacker movements. Combined with Falcon Fusion SOAR, Falcon Exposure Management enables automated, real-time remediation and integrates with the broader Falcon platform for end-to-end protection across the enterprise.

Network Vulnerability Assessment is now generally available as part of Falcon Exposure Management.

Photo: CrowdStrike