Introduction of "Vectra Protect" helps companies to reduce security risks in Microsoft 365. In addition, Vectra offers companies a free security analysis through an Azure Active Directory scan for their cloud tenants.
Vectra AI, a leading provider of AI-powered threat detection and response for hybrid and multi-cloud enterprises, today announces the launch of Vectra Protect. The posture management tool is designed to detect and mitigate vulnerabilities in Microsoft 365 (M365). Vectra Protect combines more than 50.000 hours of research and development with automation to analyze an organization's M365 security posture and create tailored implementation plans to remediate risks. To ensure that all companies - regardless of their staffing or individual resources - have access to this solution, Vectra is extending the free registration for an Azure Active Directory scan until September 30, 2022.
Access management tools like Azure AD at risk
With the growing use of M365 collaboration tools - now with over 270 million users - cyber attackers are actively targeting access management tools like Azure AD to penetrate other SaaS tools and corporate networks. From there, they launch ransomware attacks, steal intellectual property, and gain unauthorized access to sensitive user data. With its scanning engine, Vectra Protect combines insights from the M365 Graph API with data from PowerShell modules to provide a truly holistic view of the health of each identity in an organization's M365 environment. As the only scan to detect identity security issues in M365, Vectra Protect offers businesses the following benefits:
- Fast, actionable insights into remedial action: With its multi-level methodology, the scan provides companies with actionable results within hours. Rather than burdening the security team with further alerts, the scan creates a comprehensive risk mitigation map that provides a path to implementation with clear guidance on risk and operational impact.
- Tailored cloud support: Organizations gain visibility into vulnerability severity, significant changes in their configuration status, the operational impact of the required solution, and remediation steps aligned with their applicable industry standards and regulatory requirements.
- Configuration Remediation and Compliance: Vectra Protect dives deep into M365 configuration complexities, revealing misconfigurations with clear context to guide organizations to full risk remediation and provide security teams with evidence that their policies are effective and compliant.
- Confidence in Collaboration: By understanding the areas where risk and configuration issues persist, organizations can deliver on the promises of cloud technology without creating uncontrolled risk. Organizations can achieve efficiencies in implementing and using SaaS tools like M365 by eliminating default settings and aligning operations, information technology, security and audit teams on security priorities.
Lack of security controls and solutions
"Azure AD has become a major attack vector as cybercriminals seek to exploit the lack of security controls and solutions currently available for the tool," said Aaron Turner, CTO of SaaS Protect at Vectra AI. “Enterprises need to be aware that Microsoft's default security settings are not tailored specifically to their business or industry, bringing with it a wave of unnecessary risks. Combined with the constant changes in M365, both internal and external, there are a multitude of potential vulnerabilities and configuration issues that organizations are responsible for addressing. Vectra Protect helps unravel this complexity to provide organizations with both the visibility and security they need to protect these critical business tools.”
Free: Vectra Protect for Azure AD Scan
The free Vectra Protect for Azure AD Scan, valued at up to $50.000, is available to all M365 customers working in any M365 environment*. The scan focuses on a common entry point for unauthorized access and risk: access management in Active Directory.
More at Vectra.ai
About Vectra Vectra is a leading provider of threat detection and response for hybrid and multi-cloud enterprises. The Vectra platform uses AI to quickly detect threats in the public cloud, identity and SaaS applications, and data centers. Only Vectra optimizes AI to recognize attacker methods - the TTPs (Tactics, Techniques and Processes) that underlie all attacks - rather than simply alerting on "different".