Solution Brief

Effective vulnerability management programs reduce the risks of cyber attacks

and provide a consistent measurement of risk across the organization. This
is only made possible through an end-to-end approach that supports
continuous vulnerability monitoring, risk-based analysis and timely remediation.
However, most vulnerability assessments drown IT security teams in data,
and produce long reports with no prioritization or actionable fxes. Active
scanners can be disruptive so they are used less frequently than needed.
Organizations have a tough trade-off between the management headaches
of vulnerability scanning and analysis, versus the risk of potential exposure
to cyber attacks inficted by APTs and malware.

Solution Overview
Skybox raises the bar with a next-generation, end-to-end vulnerability
management solution that automates and integrates continuous vulnerability
discovery, analysis and remediation, enabling same-day attention to critical
cyber risks.
The Skybox vulnerability management solution is based on Skybox Risk
Control, which combines scanless vulnerability discovery with automated
risk analytics to prioritize vulnerabilities and supply remediation options
immediately, specifc to each organizations infrastructure. Additionally, the
Skybox vulnerability management solution is the only solution able to fnd
vulnerabilities across a large network infrastructure at least 50 times faster
than traditional active scanning technologies, delivering continuous vulnerability
management and intelligence with near-zero false positives.
VULNERABILITY
MANAGEMENT
Enterprises and government
agencies using the Skybox
vulnerability management
solution report breakthrough
results:
Nearly 100% reporting
accuracy every day, with no
disruption
False positive reduction to
near zero levels
Detection of 100,000 real
vulnerabilities within hours of
deployment
Effective reduction of risk
for the frst time
Metrics and dashboards that
provide information needed
to justify additional security
resources
Skybox

Vulnerability Management Solution

Integrated Vulnerability Discovery, Analysis and Remediation
Enables Same-Day Attention to Critical Cyber Risks
We no longer have to deal with
false positives. We have been
using the Skybox vulnerability
management solution for more
than a year, and our false posi-
tives have been signifcantly
reduced from the 20 percent we
were experiencing. Additionally,
this allows us to prioritize our
efforts in deploying patches.
- Alejandro Villar, CISO
Repsol,
a Spanish oil and gas company
HIGHLIGHT FEATURES
Firewall
Assurance
Network
Assurance
Risk
Control
4 Non-disruptive Discover vulnerabilities across the entire network
without touching every node
4 Fresh data Data is continuously updated, with no round-robin
compromise needed
4 Automate vulnerability management tasks Deliver a 50x improve-
ment in vulnerability management discovery
4 Near-zero false positives Innovative analytical technique delivers
accurate vulnerability intelligence
4 99% data reduction Context-aware risk ranking ends overload of
irrelevant data
4 Eliminate attack vectors Continuous vulnerability management cycle
supports same-day remediation of critical risks
Copyright 2013 Skybox Security, Inc. All rights reserved. Skybox is a trademarks of Skybox Security, Inc. All other registered or unregistered
trademarks are the sole property of their respective owners. DS_VM_SB_081213
Key Features
Experience best-in-class vulnerability management with
powerful, integrated functionality:
Non-Disruptive, Scanless Vulnerability Discovery
Skybox eliminates the challenges associated with active
scanning (long cycles, disruption and inaccuracy) with
Vulnerability Detector, a non-disruptive, scanless discovery
technique. Vulnerability Detector analyzes common product
information repositories to automatically and accurately
deduce vulnerability data.
Scanless discovery benefts:
Continuous discovery cycle time Analyzes 12,000
hosts per hour
Non-disruptive Deduces vulnerabilities from the
information repositories rather than touching every node
Comprehensive coverage Detects vulnerabilities on
critical systems and network devices, such as frewalls
and routers and other non-scannable devices
Automated Analytics Prioritize Vulnerabilities
and Speed Remediation
Skybox uses automated security metrics to prioritize
vulnerabilities by severity, vendor or business asset groups.
This allows network teams to continuously analyze, track and
report progress towards risk level reduction. Additionally,
Skybox Risk Control provides actionable remediation
stepsa recipe for remediation and an integrated workfow
to generate support tickets and optimize patching activities.
Risk-based prioritization benefts:
Focus time and resources Automated vulnerability
analysis eliminates lengthy cycles required to manually
analyze long vulnerability reports
Optimize patching activities Save patch management
time, improve patch scheduling, and avoid unnecessary
patching
Track and measure remediation progress Provides
executive-level visibility into the organizations risk trends
Contextual Analysis to Prevent Attacks
The Skybox vulnerability management solution also
provides context-aware attack simulation to quickly fnd and
quantify risk exposure and the likelihood of attack based on
network architecture and other factors. With context-aware
analysis, remediation teams gain visibility into the critical
short-list of vulnerabilities requiring immediate action.
Skybox Risk Control offers remediation suggestions and
considers a variety of actions, such as IPS signatures
activation, frewall confguration changes, patching, system
confguration and more.
Context-aware remediation benefts:
Fast response to critical exposure Enabling immediate
response to new exploitable threats to prevent attack
Eliminate 99% of vulnerability data Context aware
analysis ends overload of irrelevant data
Additional Resources
For more information about Skybox vulnerability management
solution, visit www.skyboxsecurity.com/solutions/vulnerability-
management or contact your local Skybox representative at
www.skyboxsecurity.com/contactus.
Skyboxs proactive security risk
management solutions provide auto-
mated, non-intrusive tools that detect,
prioritize, and drive remediation of
critical risks such as exposed vulner-
abilities and frewall confguration errors
before exploitation, preventing data
breaches and cyber attacks.
www.skyboxsecurity.com | +1 408 441 8060 | www.skyboxsecurity.com/contactus