Cloud-delivered Managed Security-as-a-Service.

What makes Armor Anywhere so compelling for DevOps teams

• Cloud-delivered
• Scales with your Environment
• Supports On-Premise, Cloud, and Hybrid IT Environments
• Delivers Audit-ready Compliance
• Migration-friendly

Security Capabilities

INTRUSION DETECTION With visibility to inbound and outbound activity at the host, Armor inspects anomalous traffic against predefined policies – detecting attacks like generic SQL injections, generic XSS attacks, DoS and generic web app effects. This service provides an agent-based Intrusion Detection System on the installed host for network traffic analysis and reporting based around policies defined by Armor.

FILE INTEGRITY MONITORING FIM is designed to monitor critical system file locations and alert when your files have changed. Monitor critical operating system (OS) files for changes that may allow threat actors to control your environment. File integrity monitoring (FIM) utilizes OS-specific policies and provides Armor log visibility to assist in reviewing security events.

MALWARE PROTECTION Armor protects your environment from harmful malware and botnets deployed to capture your data, monitor your activity or leverage your servers for illicit activity. In the event an alert is created, Armor’s threat analysts begin an in-depth investigation. Armor utilizes an enterprise-class malware protection application and deploys the application agent within the Armor Anywhere Agent.

LOG MANAGEMENT Log Management captures and documents, analyzes and reports on log events from firewalls, servers, operating system logs, and other applications to determine their validity and severity. Customers can view 30 days of logs in the Armor Management Portal and store up to 13 months of log events consistent with applicable regulatory requirements.

VULNERABILITY SCANNING Armor scans for potential points of risk to help reduce the surface area of attack. Weekly scheduled scans provide you a visible audit report to identify the vulnerabilities that attackers could use to penetrate your network, so you can develop your remediation plan.

PATCH MONITORING Patch Monitoring provides visibility into your environment to identify critical OS-level patches for resolution. Armor provides you visibility into your environment running the Armor Anywhere Agent, so you can ensure your OS is consistently up to date.

CONTINUOUS THREAT HUNTING– Proactive hunting within our data lake identifies threat actor activity not alerted to by our SIEM leveraging the research and expertise of Armor’s TRU team as well as threat intel from a variety of sources.

BRAND AND REPUTATION MONITORING – Monitors public and dark web for threat activity against our Armor customer base using a mix of automation and targeted threat research.