Leading Asset and Attack Surface Management Solution Now Easily Available for AWS Customers

SANTA CLARA, Calif., April 2, 2024 — Ordr, the leader in AI-powered asset intelligence, today announced the availability of OrdrAI CAASM+ (Cyber Asset Attack Surface Management) in AWS Marketplace, a digital catalog with software listings from independent software vendors that make it easy to find, test, buy, and deploy software that runs on Amazon Web Services (AWS).

Today’s news means that AWS Marketplace customers in need of an enterprise-scale asset intelligence solution now have immediate access to OrdrAI CAASM+. Ordr integrates with AWS to deliver complete ground to cloud visibility — from assets in remote sites and campus devices, all the way to assets in the cloud. With OrdrAI CAASM+, organizations can ensure all AWS assets align with their company security policies.

The availability of Ordr on the AWS marketplace also allows enterprises, customers, and partners to simplify the procurement process, optimize costs and address AWS enterprise spending commits.

“Whether they know it or not, every organization’s attack surface is expanding. This creates a challenge for security teams tasked with understanding and protecting their organizations; if you can’t see everything in your environment, how can you protect it?,” said Jim Hyman, CEO of Ordr. “With OrdrAI CAASM+, customers can establish a single source of the truth for all connected assets, enabling them to discover vulnerabilities, security gaps, misconfigurations, or noncompliance issues. With availability on AWS Marketplace, it’s even easier for organizations to streamline and simplify procurement, and accelerate their asset visibility and security journey.”

Ordr’s easy-to-deploy CAASM+ product secures the expanded attack surface for every enterprise — devices, users, installed software, SaaS, and cloud workloads. OrdrAI CAASM+ goes beyond API-only solutions, combining API data collection and proprietary discovery methods with AI/ML classification to give accurate, complete asset visibility across the entire enterprise, including the 40% of assets (IoT, OT, IoMT) that most often go unseen or are left unsecured. In addition, security teams can improve their security hygiene, reduce their attack surface and accelerate incident response with accurate asset context.

Get more information on OrdrAI CAASM+ in the AWS Marketplace.

SANTA CLARA, Calif. and LONDON, Jan. 3, 2023 /PRNewswire/ — Ordr, the leader in connected device security, today announced a new partnership with U.K.-based NGS (Next Generation Security), a specialist cybersecurity reseller providing consultancy, support and managed services.

Recent efforts, across all industries, at digitally transforming the workplace to become more efficient and effective have led to the growing adoption of connected devices and equipment. While these advancements have helped improve the way we work, each new device or equipment connection increases an organisation’s attack surface, making it exponentially harder for IT and security teams to be sure they have visibility into every device and connection in their network environment.

The combination of Ordr’s powerful, AI-driven connected device security platform with NGS’ years of cybersecurity implementation expertise will bring U.K.-based businesses the innovative technology solutions they need to fully understand, manage, and secure the growing number of connected devices in their environment, including Internet of Medical Things (IoMT), Internet of Things (IoT) and Operational Technology (OT).

“It can be overwhelming for organisations to try and keep track of all of their connected devices, especially in periods of high growth and technological advancement,” said Jonathan Lassman at NGS. “With Ordr’s platform, real-time asset inventory about devices, identification of vulnerabilities and risks, along with automated policies to secure them, will be available to every IT and security team.”

Ordr makes it easy to protect every connected device, regardless of location or exposure. With the Ordr platform, organisations can establish proactive security policies that enable communications required for device operations, while limiting exposure. In addition, organisations can quickly mitigate risks during an attack by quarantining devices, blocking traffic, terminating sessions or implementing Zero Trust segmentation.

“The speed with which technology is adopted and updated in today’s business world means that you need a combination of expertise and innovative solutions on your side in order to maintain a strong security posture,” added Kieran Wood, Sales Director EMEA of Ordr. “NGS is well-known for its ability to understand the modern threat landscape and protect its clients from the latest attacks. We’re thrilled to work with them on extending that expertise to connected devices.”

Get more information on how Ordr and NGS can deliver device visibility and security to your organization.

On Dec-18 Intel reported four more vulnerabilities on Treck TCP/IP stack on top of 19 more vulnerabilities found by JSOF early this year. The four vulnerabilities are:

• CVE-2020-25066, Heap-based buffer overflow with a CVSS V3 base score of 9.8
• CVE-2020-27337, Out-of-bounds write with a CVSS V3 score of 9.1
• CVE-2020-27338, Out-of-bounds read with a CVSS V3 score of 5.9
• CVE-2020-27336, Out-of-bounds read with a CVSS V3 score of 3.7

Ordr did extensive work to not only help identify devices impacted by the Ripple20 vulnerabilities but also detect any active exploitations happening. Please refer to the previous document published on how Ordr can help with Ripple20 vulnerabilities – https://ordr.net/security-bulletin/how-ordr-detects-and-mitigates-ripple20

As of now only one manufacturer has published the new vulnerabilities with a list of impacted products and the Treck official page acknowledged these new vulnerabilities. Treck also refers the CERT coordination center advisory which lists the same set of devices that was identified by the previous advisory implying that it’s in the common code base.

Based on the advisories, Ordr extends the capability to cover the new vulnerabilities as well. In summary, Ordr provides detection and protection in three different ways,

1. Identify devices that are impacted by Ripple20 based on manufacturer advisories.
2. Ordr does understand that a significant percentage of devices may never be publicly identified as Ripple20 impacted due to various reasons. Ordr developed an in-built scanner which can detect if a device is impacted by these Ripple20 vulnerabilities.
3. Ordr has an in-built IDS engine. Specific signatures were developed to detect any active exploitation of these vulnerabilities. Alarms will be generated and can be pushed to a SIEM platform for immediate action.

Finally, the best way to protect the organization is behavior based microsegmentation. Ordr provides the industry leading microsegmentation solution with variety of options based on customer needs.

For more information on how Ordr can help you identify and manage vulnerabilities for any connected device, contact us to start the conversation.