UltraViolet Cyber launches platform to assess security tool effectiveness

UltraViolet Cyber Inc. has launched Equinox, a new detection engineering platform designed to evaluate the effectiveness of a customer's existing security tools against known attacker tactics, based on information from Silicon Angle.

The Equinox platform inventories a customer's detection rules and log sources across SIEM and EDR tools, mapping them against the MITRE ATT&CK framework. This automated analysis, completed in under 30 minutes, provides a coverage map and scorecard, highlighting gaps and recommending new detections. Unlike other solutions, Equinox confirms detections against live data, offering a verifiable measure of security coverage. In one trial, a customer saw a 34.7 percentage point increase in technique coverage after implementing recommended detections, without an increase in alert volume.

The platform also assesses coverage against MITRE ATLAS for AI and machine learning systems, with UltraViolet claiming to be the first to offer a full coverage map for this framework. Equinox is integrated into UltraViolet's managed security operations center service and is also available as a standalone engagement for organizations with their own SOCs. Initial support includes tools from SentinelOne, CrowdStrike, Elastic, and Panther Labs, with Splunk and Microsoft Defender support in development.

Source: Silicon Angle