Tenable Integrates AI-Fueled Identity Security into Exposure Management Platform

Rhea-AI Summary

Tenable, the Exposure Management company, has introduced new identity-aware features that use AI and machine learning to provide a unified view of user identities and entitlement risks in both on-prem and cloud environments. This helps reduce the risk of cyber attacks by identifying and disrupting attack paths through Active Directory. The solution addresses the gaps in AD security by offering continuous assessment, real-time attack detection, AI-driven exposure and risk prioritization, and detailed remediation instructions. New features include Identity Unification, Identity Explorer, and Identity Risk Score. Tenable also extended support for protecting Azure Active Directory deployments.

Positive

• Tenable's new identity-aware features provide a unified view of user identities and entitlement risks across on-prem and cloud environments, reducing the risk of cyber attacks.
• According to a study by Forrester Consulting, 50% of IT and security professionals lack an effective way to integrate user privilege data into their vulnerability management practices.
• Traditional AD security tools provide out-of-date visibility into the security posture of directory services, while Tenable Identity Exposure offers continuous assessment and real-time attack detection.
• The new features, including Identity Unification and Identity Explorer, give organizations a complete understanding of identity risk and help prevent exploited identity exposures.
• Tenable's Identity Risk Score uses AI and machine language models to quantify the risk of an asset by combining vulnerability, exposure, and identity entitlements.
• Tenable has extended support for protecting Azure Active Directory deployments, allowing customers to unify identities across environments and manage cloud identity risk.
• The integration of these capabilities within the Tenable One Exposure Management Platform provides identity awareness for vulnerability, attack path analysis, cloud posture, and web application security practices.

Negative

• There is no specific information on the financial impact or revenue potential of the new identity-aware features.
• The press release does not mention any partnerships or collaborations related to the new features.
• There is no mention of customer feedback or testimonials regarding the effectiveness of Tenable's Identity Exposure solution.

Unified view of identity and entitlement risks across Active Directory and Azure AD helps reduce the risk of identities being used in cyber attacks

COLUMBIA, Md., June 27, 2023 (GLOBE NEWSWIRE) -- Tenable^®, the Exposure Management company, today announced the addition of several new identity-aware features that harness the power of artificial intelligence (AI) and machine learning to provide a unified view of all user identities and entitlement risks, whether on-prem or in the cloud. Tenable Identity Exposure now gives customers the most advanced vulnerability and asset risk prioritization capabilities to identify and disrupt attack paths through Active Directory (AD). The solution is fully integrated within the Tenable One Exposure Management Platform.

According to a study conducted by Forrester Consulting on behalf of Tenable, half (50%) of surveyed IT and security professionals globally say they lack an effective way to integrate user privilege data into their vulnerability management practices¹. This is a problem, as AD is typically the central source of truth for most critical business applications and services within an enterprise. Compromising AD and abusing access are popular methods used in ransomware and other attacks.

Traditional AD security tools provide point-in-time scans and aggregate millions of event logs only to deliver out-of-date visibility into the security posture of directory services. Tenable Identity Exposure enables organizations to address the gaps that have existed in AD security for decades. It helps customers reduce the attack surface of their AD, providing continuous AD assessment, real-time attack detection, AI-driven exposure and risk prioritization, and detailed remediation instructions.

Tenable Identity Exposure now allows companies to manage their AD security posture across hybrid cloud environments at all times and visualize any active threats to their identities. New Tenable Identity Exposure features include:

• Identity Unification and Identity Explorer - a view of entitlements across on-premises and cloud-based AD deployments. This provides the most accurate assessment of identity risk and unmatched intelligence to help prevent exploited identity exposures. This feature provides the most complete understanding of how to prevent identities from being used for privilege escalation or other attack vectors.
• Identity Risk Score (powered by Tenable’s Artificial Intelligence and Data Science Engine) - new capability that uses mature AI and machine language models to quantify the risk of an asset by combining the vulnerability, exposure and identity entitlements of an asset, leveraging Tenable's industry leading exposure management data.
• Azure Active Directory support - extended support for protecting public and hybrid cloud Azure Active Directory deployments, so customers can unify identities across environments and manage cloud identity risk with Indicators of Exposure specific to Azure AD. With the shift of business applications to the cloud, alongside Active Directory, Azure AD has become a critical access control point.
  

Full integration of these capabilities within the Tenable One Exposure Management Platform includes single sign-on, data sharing and app switching between solutions, providing identity awareness for vulnerability, attack path analysis, cloud posture and web application security practices.

“Access misconfiguration and weak identities are at the heart of ransomware attacks and corporate data breaches. Threat actors are only one identity vulnerability away from breaking into SaaS applications and stealing data. By leveraging modern AI techniques, Tenable can now quickly identify and prioritize identity and entitlement-related problems across AD and Azure AD,” said Nico Popp, chief product officer. “The ability to safeguard identities both on-prem and in the cloud is essential for empowering customers to prevent attacks rather than just clean up the aftermath.”

More information on identity security from Tenable is available at: https://www.tenable.com/products/tenable-ad

About Tenable
Tenable^® is the Exposure Management company. Approximately 43,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. As the creator of Nessus^®, Tenable extended its expertise in vulnerabilities to deliver the world’s first platform to see and secure any digital asset on any computing platform. Tenable customers include approximately 60 percent of the Fortune 500, approximately 40 percent of the Global 2000, and large government agencies. Learn more at tenable.com.

Media Contact:
Tenable
tenablepr@tenable.com

_____________________

¹ A commissioned study conducted by Forrester Consulting on behalf of Tenable, May 2023, based on a global survey of 825 security and IT professionals 

FAQ

What are the new features introduced by Tenable?

Tenable has introduced Identity Unification, Identity Explorer, and Identity Risk Score as new features. These provide a unified view of user identities and entitlement risks, help prevent exploited identity exposures, and quantify the risk of an asset.

What is the significance of Active Directory in cybersecurity?

Active Directory (AD) is typically the central source of truth for most critical business applications and services within an enterprise. Compromising AD and abusing access are popular methods used in cyber attacks.

What is the benefit of using Tenable's Identity Exposure solution?

Tenable's Identity Exposure solution offers continuous assessment, real-time attack detection, AI-driven exposure and risk prioritization, and detailed remediation instructions. It helps organizations reduce the attack surface of their AD and manage their AD security posture across hybrid cloud environments.

How does Tenable quantify the risk of an asset?

Tenable's Identity Risk Score uses AI and machine language models to quantify the risk of an asset by combining vulnerability, exposure, and identity entitlements. This provides organizations with a measure of the asset's risk level.

Does Tenable support Azure Active Directory?

Yes, Tenable has extended support for protecting Azure Active Directory deployments. This allows customers to unify identities across environments and manage cloud identity risk.