Software manages security risks

EIQNetworks this week introduced software designed to integrate data from multiple network, system and security sources and deliver customers an accurate risk assessment for their organizations.

SecureVue software builds on eIQ’s Network Security Analyzer and Enterprise Security Analyzer products to collect and correlate security, asset, configuration, performance and vulnerability metrics, the company says. The combination of data from those five IT components can give an accurate assessment of a company’s level of risk, eIQ says.

“How do you roll up to a presentation view the most critical risk to any environment at any given time? That is what we are trying to address with SecureVue,” says Brian Mehlman, director of product strategy at eIQNetworks.

SecureVue uses weighted scores for various metrics to determine the level of risk to a customer network or business objectives, Mehlman explains. The software collects data from network devices, servers and applications to better understand what metrics are critical to specific businesses, the company says. For instance, a downed server may not be a security risk, but it could be a risk to the business if services aren’t delivered within specified times.

The software ships with some 250 rules out of the box, and customers can also configure the software for role-based management and reporting, as well as customize the dashboard for executives, line of business managers or IT staff.

SecureVue does not require agents but uses industry standard APIs and taps syslog data to collect pertinent metrics from security, asset, configuration, performance and vulnerability monitors.

Considering their breadth of security and management tools, management companies such as CA and IBM compete with SecureVue, And security information vendors such as ArcSight, which acquired network access control vendor Enira Technologies, have worked to evolve their technology toward risk management as well.

SecureVue pricing starts at about $50,000.