Lumension Security™, Inc., a recognized, global leader in security management, today announced plans to bring to market the industry’s first integrated security architecture that will empower enterprises to cost-effectively deploy and centrally manage its proactive, unified protection and control suite of products.
SCOTTSDALE, Ariz., Nov 12, 2007
By employing User-Centered Design principles, the Company will deliver a holistic endpoint security platform with a single, policy-based Web interface for unified administration, management and compliance reporting across Lumension Security’s entire best-of-breed product portfolio.
As financially motivated hackers use sophisticated methods such as automation tools, they are identifying and exploiting vulnerabilities faster than ever and gaining access to organizational infrastructure and data. In fact, with a total of 3,273 vulnerabilities reported in the first half of 2007, and 90 percent being exploitable remotely¹, both public and private organizations are increasingly susceptible to the window of exposure before vulnerabilities are remediated. In addition, the regulatory scrutiny and prescriptive measures established on a global basis have increased significantly over the past five years. According to IDC, 63 percent of organizations feel that they might be impacted by a regulatory breach and a major information loss every five years.
Lumension’s new powerful architecture will deliver a single user interface that allows customers to achieve unprecedented levels of efficiency and lowers cost of ownership through the automation of the entire security management process.
By making the architecture more extensible, Lumension will also increase the depth of vulnerability coverage and speed of remediation across the enterprise, enabling customers to quickly assess security risk and plug vulnerability holes in real time. By leveraging third party vendor content from leading application and OS vendors, Lumension will deliver real time, ready-to-deploy remediation packages; including foreign language patches, operational patches, and hardware patches to help protect highly distributed, global enterprise IT environments.
The key benefits of the new architecture that will be immediately realized by customers and partners include:
- Extended vulnerability coverage for security and non-security patches and hot fixes
- Expansion of hardware/firmware assessment and remediation
- Rapid speed of remediation for real time deployment
- Complete foreign language coverage
- Increased vulnerability metadata library with many new applications being supported
- Significantly enhanced automation to support centralized or distributed global IT environments
- Multiple levels of vulnerability accuracy checks
- Full support for subscription and protected content (for valid license end-users)
- Complete end-to-end compliance reporting view for all vulnerabilities and remediations within the enterprise
- Policy-based compliance enforcement
“The security landscape is exceptionally dynamic – the types of threats have gone from viruses and worms to for-profit cybercrimes targeting data and specific organizations. Security is no longer an IT concern but a business issue, forcing organizations and their IT departments to reexamine how they manage IT and ensure corporate governance,” said Pat Clawson, chairman and CEO of Lumension Security (formerly PatchLink Corporation).
“This new security model represents the next generation in security – enabling customers to centrally control and administer security policies across their entire enterprise by coupling feature rich, best-of-breed technologies into a single binary. Customers can cost effectively manage their entire security management lifecycle by using a single, web-based user interface for a unified view of their risk profile, as well as for unified administration, management and compliance reporting across their entire product portfolio.”
Lumension’s new policy-based framework enables enterprises to easily establish and centrally enforce policies, as well as demonstrate compliance with their organizational security policies and industry regulations through continuous discovery, proactive assessment, real time remediation and comprehensive reporting across the enterprise.