SecureVisio NextGen SIEM
is a new generation Security Information and Event Management solution designed to meet modern security requirements enabling rapid detection of incidents and other threats.

Features and benefits:

• Many detection methods – correlation rules (SIEM), behavioral analysis of users and systems (UEBA), Threat Intelligence
• Wide scope of analysis – SIEM analyzes security events (logs), current vulnerabilities, Threat Intelligence information and estimated risks
• Many methods of reading logs – Syslog, e-mail, Windows Event Forwarding, as well as the ability to read logs from databases and flat files
• Graphic parser editor – the predefined set of parsers can be extended with new parsers created with the help of the graphic editor
• Event repository – specialized database for long-term storage and quick search of security events

Unique features:

• Electronic documentation of networks and IT systems – incident detection takes place in the context of information on the current network and IT systems discovered with Auto-Discovery function
• Electronic documentation of personal data – incident detection takes place in the context of information on personal data processed in IT systems and the GDPR security requirements
• Awareness of business impact of the incidents – detection of incidents is carried out with risk awareness (ISO/IEC 27005) and business consequences of security breaches
• Dynamic SIEM rules – SIEM correlation rules automatically adapt to changes in networks and IT systems as well as current risk levels

SecureVisio SOAR
is a specialized Security Orchestration, Automation and Response solution for automating management and response to incidents and improving other security management processes.

Features and benefits of the solution:

• Unification of tools – one graphic console contains all the tools and information needed to explain and handle incidents
• Organized work of people – the process of incident management (Workflow) takes place in stages, in accordance with applicable standards (including ISO/IEC 27035)
• Integration of tools and data sources – Playbooks automatically launch tools and acquire data from external sources (including Threat Intelligence, Vulnerability Assessment)
• Automate incident response – ready-to-use responses to various types of incidents, including removing cybercriminals from internal systems

Unique features:

• Unified vulnerability management – cooperation with Vulnerability Assessment tools and CVE as well as integrated Workflow and Playbooks for vulnerability management
• Simulation and visualization of threats – analysis of incidents and vulnerabilities is supported by graphical tools simulating attacks and other threats
• Business prioritization – incidents are automatically prioritized in relation to the importance of resources for the organization (i.e. business processes, sensitive information)
• Performance metrics with the business context – key performance indicators KPI and key risk indicators KRI in relation to business processes