DFLabs Introduces First SOAR Platform Optimized for Both Managed Security Service and Managed Detection/Response Providers

RSA CONFERENCE — DFLabs, the award-winning Security Orchestration, Automation and Response (SOAR) vendor, today announced a new version of its DFLabs IncMan SOAR platform tailored for the needs of Managed Security Service Providers (MSSPs) and Managed Detection and Response (MDR) service providers. IncMan SOAR now enables MDR providers and MSSPs to centrally perform one-to-many operations across multiple customer environments regardless of the security products deployed at each location, while providing flexible deployment options for regulatory compliance and granular analytics for reporting.

DFLabs is demonstrating the MSSP-centric version of IncMan SOAR this week at RSA Conference 2019 Booth #3104 located in the South Hall.

According to MarketsandMarkets, the global Managed Security Services market size was USD 20.81 Billion in 2017 and is expected to reach USD 47.65 Billion by 2023, growing at a Compound Annual Growth Rate (CAGR) of 14.7% during the forecast period.

Managed Security Service Providers face many of the same challenges as an internal security operations center only on a much larger scale, especially those who offer managed detection and response, said Michele Zambelli, CTO of DFLabs. This new version of IncMan SOAR enables MSSPs and MDRs to work seamlessly across multiple customer instances, take one to many actions when needed, maintain data segregation and granular access controls, and provide per-customer analytics and reporting.

Vendor Agnostic Runbooks One of the leading challenges faced by MSSPs is the increasing number of third party security products they must support in customer environments. For example, an action as simple as querying a firewall may involve interacting with a dozen different technologies. IncMan SOAR now provides a vendor agnostic Runbook capability which enables MSSPs to execute a single action across any number of client technologies such as blocking a malicious IP address, while providing each customer the ability to maintain control over what actions are allowed.

Customer-Specific Privacy Controls While information sharing between MSSPs and their customers is a vital tool in detecting and responding to security incidents, legal and regulatory mandates often require MSSPs to support data storage and communication options that comply with privacy and confidentiality directives. IncMan SOAR enables MSSPs to put customers in control of their data, allowing them to determine which intelligence, Playbooks, Runbooks and other information can be shared with the service provider and its other customers.

Granular Reporting and Analytics Performance data and analytics are also critical assets for MSSPs, for both improving service levels and demonstrating value to customers. IncMan SOAR automates the collection and reporting of metrics and key performance indicators (KPI) across one or more environments, providing deep visibility into all facets of each customers security infrastructure and security posture, as well as MSSP actions and their outcomes.

Availability The new version of DFLabs IncMan SOAR will be available from DFLabs and its business partners worldwide in Q2.

About DFLabs IncMan SOAR DFLabs is the most open SOAR solution in the market, which provides a framework for customizing and adding new automated integrations between security tools and IncMan SOAR, without the need for complex coding. With its unique capability of full security incident lifecycle automation, DFLabs patent pending R3 Rapid Response Runbooks use hundreds of automated actions to provide workflows and execute a variety of data enrichment, notification, containment and custom actions based on complex, stateful and logical decision making. This accelerates the ability of responders to assess, investigate and hunt for threats. Runbooks also collect and facilitate knowledge transfer between incident response (IR) and SOC teams.

About DFLabs DFLabs is an award-winning and recognized global leader in security orchestration, automation and response (SOAR) technology. The companys management team has helped shape the cyber security industry, which includes co-editing several industry standards such as ISO 27043 and ISO 30121. Its flagship product, IncMan SOAR, has been adopted by Fortune 500 and Global 2000 organizations worldwide. DFLabs has operations in Europe, North America, and EMEA. For more information, visit www.dflabs.com or connect with us on Twitter @DFLabs.

Marc Gendron
Marc Gendron PR for DFLabs
781-237-0341
[email protected]