DeepSurface

DeepSurface is a risk-based predictive vulnerability management platform offered by DeepSurface Security. According to the vendor, it is designed to assist organizations of all sizes in analyzing, prioritizing, and mitigating security risks more effectively. DeepSurface caters to various professions and industries, including information security professionals, IT managers and directors, risk management professionals, compliance officers, and financial institutions.

Key Features

New Remediation Workflow Manager: According to the vendor, this feature allows users to break down issues based on system ownership, create actionable tasks with clear instructions, export tasks as tickets to multiple third-party products, and track task status over time.

The DeepSurface RiskAnalyzer: The vendor claims that this feature goes beyond vulnerability scanners and threat feeds by collecting additional context. It automatically filters out false-positives and non-exploitable vulnerabilities, provides detailed reports on how adversaries can exploit medium vulnerabilities and chains of low and medium vulnerabilities, and helps prioritize vulnerabilities specific to a given environment.

Remediation Workflow Manager: The vendor states that this feature aligns security and patching teams through automated workflow management. It saves time in remediation planning and execution, improves accountability and alignment between vulnerability and patch management teams, reduces the volume of patching tasks sent to remediation teams by targeting risky items in each team's environment, easily exports to ticketing systems like Jira and ServiceNow, and tracks issues over time with bi-directional context from vulnerability scanners and ticketing systems.

Integrations: According to the vendor, DeepSurface offers seamless integration with existing endpoint and vulnerability scanners. It integrates with Microsoft Defender for Endpoint, Rapid7, Qualys, and Tenable vulnerability scanners, automatically imports holistic information from Microsoft Windows, Linux, and MacOS hosts, combines vulnerability data with host information for comprehensive analysis, and provides actionable data, remediation suggestions, and detailed charts and graphs for mitigating and communicating risk.