Orpheus

Orpheus Cyber is a provider of threat intelligence and cyber risk rating services. Their cyber risk management platform is designed to assist organizations in monitoring and mitigating cyber risks. According to the vendor, their services cater to organizations of various sizes, including small businesses and large enterprises. The platform is utilized by cybersecurity professionals, risk management professionals, IT professionals, compliance officers, and financial institutions to manage cyber risks effectively.

Key Features

External Attack Surface Management: According to the vendor, the platform allows for continuous monitoring and assessment of exploitable issues on the attack surface. It identifies vulnerabilities such as database instances, CVEs, poor email security, remote desktop access, and expired certificates. The integration of threat intelligence enables effective prioritization, uncovering issues that may be missed by other companies, including breached credentials, dark web mentions, and typo squatting.

Risk-Based Vulnerability Management: The platform utilizes machine learning technology to rank vulnerabilities based on their likelihood of being exploited. According to the vendor, it focuses on vulnerabilities that pose the greatest risk to the infrastructure, allowing organizations to prioritize their patching efforts based on real-time threat actor activity. The platform also provides threat intelligence on which adversaries are known to exploit specific CVEs, helping organizations align their patching with their threat model.

Third-Party Supply Chain Risk Management: The vendor claims that their platform enables organizations to understand and manage the cyber risk posed by their supply chain. It goes beyond point-in-time self-assessment questionnaires by continuously monitoring the cyber risk present in third parties and the supply chain. The platform assesses severe unpatched CVEs and vulnerabilities currently being exploited.

Cyber Threat Intelligence: The platform provides insights into current threat actor tactics, techniques, and procedures. According to the vendor, it helps organizations understand how attack techniques are evolving and identify if they are being targeted by threat actors. It also allows organizations to monitor the availability of their data on the deep and dark web.