Mandiant Advantage (discontinued)

Mandiant provides assurance about current security posture of an organisation with the best practices. In the cyber security world, there are plethora of cyber security companies and tools available but Mandiant stands out among them because of their good technology and people expertise. It helps us in continuously measure and valudate our security effectiveness against adversaries.

Mandiant Advantage Security Validation, designed by Mandiant company, can automate a testing program to give us authetic and real world data on how our security controls are effectively working / performing. This solution provides trusted evidence on how well our security controls work against threats targeting our organization. This enables security teams to emulate real attack behaviors against security controls authentically throughout the attack lifecycle and the entire security stack.

Mandiant ASM aims to give businesses the ability to manage their attack surface, which includes internet facing assets, cloud resources and third party providers. With this they can identify and classify vulnerabilities and exposures on this surface through vulnerability regulation. It also gives them powerful threat information that indicates Mandiant ASM’s capabilities of tracking and responding to emerging threats. Employers can leverage these benefits to guide customers in adhering to sets of rules.

Many companies that have an presence can benefit from using Mandiant ASM to identify and manage their internet facing assets, like web servers, email servers and DNS servers. This helps reduce the risk of cyberattacks targeting these assets.However smaller organizations with exposure might not always need the extensive attack surface monitoring provided by Mandiant ASM. For example a small company with one website may not require much monitoring, as a larger corporation.

We need to get a full look across all networks to improve our visibility and identify all attack surfaces vs our controls in-place to protect against them. Getting clear visibility to where threats are due to any type of control deficiency - unpatched vulnerability, IT scope creep, unauthorized system added to our network, etc. Super helpful!

It is well-suited to larger enterprise environments and less well-suited to small businesses. You need some level of maturity to be able to fully utilize this tool, but overall it is fairly easy to get fully up and running within the environment, which is really nice. Well-suited if you have the budget for it and it saves on staff time to perform these functions. Not well-suited if you don't have a good budget in-place for your environment size.

We use Mandiant Security Validation product in the Global Information Security department to assess and validate enterprise network infrastructure and security controls. We use the data and results to improve company security postures.

When you have a policy change in enterprise firewalls, you can monitor the change and validate the proper implementation.