Story image

LogRhythm SIEM gets a boost with Webroot threat intelligence & IP reputation services

31 Jan 2018

LogRhythm and Webroot have joined forces to boost SIEM intelligence to new levels with the addition of IP reputation and threat intelligence services.

The two companies have released a new fulfilment option for LogRhythm’s next-generation SIEM customers, which will allow Webroot’s BrightCloud IP reputation service to be added to customers’ SIEM platforms.

The joint solution will also feature Webroot BrightCloud Threat Intelligence capabilities for comprehensive, real-time threat visibility and contextual security analytics.

According to the companies, the integrated solution will automatically take action and respond to events generated in LogRhythm’s SIEM. It will also use Webroot’s BrightCloud IP Reputation service to help customers identify malicious IPs in their network traffic.

When the SIEM discovers the threat, the solution will provide deep visibility into both network behavioural changes and malicious IPs. It will also automate remediation.

According to Webroot’s VP of worldwide OEM sales, Michael Neiswender, advanced cyber threats are challenging customers more often.

"Through our partnership, LogRhythm can provide its customers with proactive protection against modern threats. The Webroot BrightCloud IP Reputation Service protects LogRhythm users from malicious IP traffic by integrating accurate and timely threat intelligence into the network perimeter and services."

Webroot and LogRhythm have been working together as part of a group of intelligence vendors in LogRhythm’s Threat Intelligence Ecosystem. The group’s aim is to provide security intelligence through a next-generation security analytics and intelligence platform.

"Webroot's new fulfillment site is a welcomed addition to the LogRhythm Threat Intelligence Ecosystem,” adds LogRhythm VP of marketing and business development, Matthew Winter.

“The Webroot BrightCloud IP Reputation Service greatly enhances the analytics and incident response workflow of the LogRhythm next-gen SIEM platform. This integrated solution gives our customers highly-accurate threat intelligence, allowing them to detect and respond to threats more quickly and efficiently."

In December 2017, LogRhythm’s Threat Lifecycle Management Platform gained a place as leader in the Gartner “Magic Quadrant for Security Information and Event Management” research report.

The SIEM Leaders quadrant recognises vendors that provide a strong match to market requirements, are successful in building revenue, have superior vision and execution for emerging requirements.

It’s an honor to be consistently recognised as a SIEM Leader by Gartner,” commented LogRhythm CTO Chris Petersen at the time.

 “As data breaches continue to come fast and furious, it’s critical that companies rapidly detect, neutralize and recover from security threats. I believe this research report speaks volumes about LogRhythm’s leadership in the market and our ability to meet the challenges of today’s continually evolving threat landscape for enterprise Security Operations Centres (SOCs) across the globe,” Petersen concluded.

New threat rears its head in new malware report
Check Point’s researchers view Speakup as a significant threat, as it can be used to download and spread any malware.
Oracle updates enterprise blockchain platform
Oracle’s enterprise blockchain has been updated to include more capabilities to enhance development, integration, and deployment of customers’ new blockchain applications.
Used device market held back by lack of data security regulations
Mobile device users are sceptical about trading in their old device because they are concerned that data on those devices may be accessed or compromised after they hand it over.
Gartner names ExtraHop leader in network performance monitoring
ExtraHop provides enterprise cyber analytics that deliver security and performance from the inside out.
Symantec acquires zero trust innovator Luminate Security
Luminate’s Secure Access Cloud is supposedly natively constructed for a cloud-oriented, perimeter-less world.
Palo Alto releases new, feature-rich firewall
Palo Alto is calling it the ‘fastest-ever next-generation firewall’ with integrated cloud-based DNS Security service to stop attacks.
The right to be forgotten online could soon be forgotten
Despite bolstering free speech and access to information, the internet can be a double-edged sword, because that access to information goes both ways.
Opinion: 4 Ransomware trends to watch in 2019
Recorded Future's Allan Liska looks at the past big ransomware attacks thus far to predict what's coming this year.