Blue Hexagon

Blue Hexagon is a cloud-native security platform that, according to the vendor, provides comprehensive threat detection and response capabilities for cloud workloads, networks, and storage. Leveraging deep learning and artificial intelligence (AI), the platform aims to detect and stop threats in real-time, offering what the vendor claims is fast and accurate protection against a wide range of cyber threats. Blue Hexagon is designed to cater to organizations of all sizes, from small businesses to large enterprises, and is utilized by various professionals and industries, including CISOs, SecOps Teams, DevOps Teams, Cloud Experts, Financial Services, Healthcare, Technology, Retail, and Manufacturing.

Key Features

Cloud Detection and Response: According to the vendor, Blue Hexagon provides continuous cloud-native security, visibility, and compliance for major cloud platforms such as AWS, GCP, Azure, and OCI. It offers asset inventory and misconfiguration detection for cloud hardening, and aims to detect active threats in workloads, storage, and network without relying solely on outdated signatures or threat intelligence feeds.

Continuous Threat Detection with Deep Learning: Addressing the challenges of translating policies and protections from traditional on-premises networks to cloud-based environments, Blue Hexagon aims to detect threats that evolve faster than traditional defenses can deliver. The vendor claims that it provides sub-second identification of known and unknown threats with near 100% accuracy and natively works with cloud infrastructure for visibility and enforcement.

AI Security for Actionable Outcomes: Blue Hexagon, as claimed by the vendor, connects to cloud infrastructure in an agentless manner to collect raw data for analysis. It analyzes raw data with proprietary deep learning models to detect malware, command and control, and unusual patterns of behavior. The platform is said to provide early access to threat intelligence and allows customization of detection rules, aiming to deliver visibility into asset inventory, cloud activity, and compliance with multiple standards.

Cloud-Native and Security Integrations: Blue Hexagon seamlessly connects to cloud infrastructure via cloud-native APIs for data collection and analysis, according to the vendor. It enriches, aggregates, and indexes raw data in a single SaaS portal for visibility, hunting, and alerting across multiple clouds, regions, and accounts. The platform also integrates with SIEM platforms, perimeter security tools, workflow/collaboration systems, and endpoint security tools, providing real-time threat intelligence and contextual malware reports.

Cloud Visibility: The vendor claims that Blue Hexagon offers complete cloud visibility into asset inventory, users, entities, resources, network, and control plane transactions. It aims to keep track of dynamic assets in the ephemeral cloud, understand communication patterns, and detect unusual flows, transactions, and connections. The platform is designed to correlate security alerts with cloud activity for effective response and remediation.

Cloud Misconfiguration (CSPM): Blue Hexagon, as claimed by the vendor, identifies several hundred types of misconfigurations and highlights critical ones. It assesses all cloud resource types across multiple clouds, accounts, and regions, providing guided remediation for misconfigurations and aiming to reduce overall risk by combining continuous threat detection with misconfiguration detection.

Cloud Workload Threat Detection (CWPP): According to the vendor, Blue Hexagon goes beyond hash checks and heuristics to find attacks before they manifest. It inspects every file in workloads for malware and lateral movement risk, detects supply chain backdoors, and provides serverless security by detecting secrets and elevated permissions.

Cloud Network Threat Detection: Blue Hexagon, as claimed by the vendor, detects various types of cloud attacks, including supply chain infection, cryptominers, APTs with command and control, and unauthorized activity. It operates on cloud flow logs and takes advantage of cloud-native capabilities like VPC Traffic Mirroring, aiming to provide real-time monitoring and detection of unauthorized activity and command/control and beaconing. The platform also analyzes encrypted traffic for threat detection.

Cloud Storage Threat Detection: Blue Hexagon aims to defend against ransomware and the lateral movement of malicious code, according to the vendor. It aims to prevent unauthorized access to cloud storage buckets and the use of buckets as a conduit for malware artifacts. The platform aims to monitor and detect unauthorized storage activity in real-time, providing early detection of ransomware and malware payloads.