Security Auditor

What is Security Auditor?

Simplified security policy management software.

Security Auditor centralizes security administration across your cloud, on-premises, or hybrid environment. The technology allows you to quickly enforce adherence to security policy and mitigate the risks of misconfiguration of security – a leading cause of data breaches.

How does it work?

Security Auditor automatically protects new systems as they come online and continuously monitors those systems, identifying any configuration settings that don't meet your requirements. You'll be notified of any policy exceptions, and you can make these changes yourself from an easy-to-use, web-based console that simplifies compliance reporting tasks and requirements. Alternatively, if you prefer more automation, you can run the FixIt function and let Security Auditor do the work for you.

Protect your data with automated security policy management

Autodiscover

Security Auditor will simplify the identification and security configuration of your elastic cloud infrastructure, detecting new systems when they are online and automatically applying the appropriate security controls.

Continuous Monitoring

Gain complete visibility into preventable security errors by continuously monitoring your systems against your security policy. Security Auditor will notify you in real time of any policy exceptions.

Automatic Remediation

Save time with automated security administration. When non-compliant settings are found, you can fix them or let Security Auditor do it for you automatically.

How Security Auditor Works

Security Auditor Product Features

Exception-based reporting

Let Security Auditor notify you of critical non-compliance configurations that need to be addressed.

Installation without us

Manage servers easily and efficiently with agentless technology.

Centralized web-based console

See what's happening throughout your environment from a centralized, web-based console.

Secure SSH connections

Secure SSH connections from the Security Auditor console to your systems ensure that no data flows in clear text and no passwords are stored.

Full audit trail

The Security Auditor records all checks, non-compliant configurations, and corrections so that you have a full audit trail.

Simplified compliance reporting

Automatically create compliance reports in the center console on the schedule you choose. System by system, consolidated groups, or all servers in a report - the choice is yours.

Secure your cloud deployments

Security Auditor integrates seamlessly with public, private, and hybrid cloud deployments, including Amazon EC2 and S3. The Security Auditor discovers the systems in your cloud infrastructure as they are created, and then applies the security settings to protect your cloud systems correctly. Over time, Security Auditor continues to monitor and audit your settings, ensuring that your cloud systems are effectively protected from malicious intruders and inadvertent data breaches.

Are the blacklisted services disabled?

Have the critical system files been changed?

Are the remote access settings properly protected?

Are unknown entities trying to access your systems?

Integrate security and DevOps

The Security Auditor will provide the visibility and security that your management teams require. As your DevOps team deploys systems on-premises or in the cloud, including Amazon EC2 servers, Security Auditor automatically applies security controls and audits, instantly reporting what it finds. Regardless of the regulatory framework you're working in, Security Auditor's automatic security controls application will alert you to vulnerabilities and misconfigurations.

Controls can be applied differently to different groups of systems based on your preferences. For example, use a configuration set for development systems and a more rigorous configuration set in your production deployments. If desired, Security Auditor can automatically change findings that are not compatible with the desired configuration settings.

Cross-platform security policy management

Ensure adherence to policy across multiple platforms. Security Auditor automates security administration and compliance reporting for organizations that run:

Linux

AIX

HP-UX

Solaris

IBM i

Windows

AWS

Azure

Google Cloud

Open stack

IBM Cloud

More

Automated security administration

When settings must be changed manually or by using scripts on multiple servers, the logistics of complying with your security policy become impractical and unauditable. From changing server settings to running compliance checks, you can perform tedious and time-consuming security administration tasks and let the software handle them automatically.

Here are some ways Security Auditor can automate your security administration tasks:

Apply your organization's security configuration when new on-premises or cloud servers come online

Manage permissions and ownership of files and directories

Run compliance checks to identify new files or changes to settings or files

Return global security settings to meet compliance requirements

Identify inactive local user accounts

Verify that local user accounts remain configured correctly

Confirm that authorized changes are auditable by compliance teams

Easy solution of policy discrepancies

It's one thing to identify a complete list of security policy exceptions on your servers, and another to actually resolve them all. No security administrator has time for such an onerous manual task. Security Auditor has the power to find and fix discrepancies in servers – resulting in a more secure system in less time.

After Security Auditor identifies cases where your actual settings do not match the defined policy, the software uses the FixIt feature to automatically correct policy exceptions. You can schedule FixIt to run at selected times or in real time, and the software will record the changes you make in a report that you can easily save and distribute. With Security Auditor, compliance with your security policy is quick and easy, allowing you to avoid security threats that might otherwise be hidden in the system for months.

Compliance Reports

Reduce the burden on your administrators to provide compliance and audit reports across all your systems. From a central console, Security Auditor lets you monitor changes and run reports without the need to consolidate data across multiple servers or involve operations staff.

Automating your compliance reports with Security Auditor allows you to:

Monitor changes to the ownership, permissions, and attributes of a specific set of files or directories

Document policies in detail, including notes proving adherence to corporate policies, justifying deviations from best practices, or detailing non-compliant items

Run reports that display new and changed values and previous values

Consolidate reports from multiple servers into one report for auditors, eliminating manual processes

Run reports on time, regardless of how busy administrators are

Easily distribute email reports in PDF or CSV format to you or your compliance officers

System Requirements:

CPU: 1.8 GHz dual core processor

RAM: 2 GB

HDD/SSD: 50 GB of free space on main drive

Operating system: Microsoft Windows 8 32-bit, Microsoft Windows 7 32-bit, and Microsoft Windows Vista 32-bit

Resolution: 1024×768