Delta Risk: SOAR Upgrade Reduces False Alarms
Delta Risk, a Top 200 MSSP for 2019 and security operations center-as-a-service (SOCaaS) provider, has released a new version of its ActiveEye security orchestration, automation and response (SOAR) platform that reduces false-positive alerts by more than 95 percent, according to a prepared statement.
The new SOAR platform release, ActiveEye 2.0, is a co-managed, cloud-native solution designed to help organizations defend against cyber attacks and data breaches, Delta Risk said. It offers a variety of security features, including:
- Alert Resolution Metrics: Provide dashboards that allow organizations to analyze security activities, create executive reports and view key performance indicators (KPIs) such as how long it takes for alerts to be resolved.
- Personalized Customer Notebooks: Enable organizations to provide Delta Risk’s SOC team with information about what is important or what to ignore across their IT environments, such as employees on international travel or internal system testing exercises.
- Virtual Analyst Playbook Orchestration: Reduces false positives to help SOC analysts prioritize critical alerts and accelerate incident response.
ActiveEye 2.0’s features also complement existing capabilities for endpoint, network and cloud security, including monitoring and management for Amazon Web Services (AWS), Microsoft Office 365 and Azure and Google G Suite.
What Does ActiveEye 2.0 Mean for Delta Risk?
Delta Risk expanded its MSP partner program last year, and ActiveEye 2.0 could lead MSPs to partner with Delta Risk to integrate SOAR capabilities into their portfolios. That way, Delta Risk’s MSP partners could capitalize on the rising demand for SOAR tools.
An estimated 30 percent of organizations with a security team larger than five people will leverage SOAR tools in their security operations by 2022, technology research firm Gartner stated. Meanwhile, Swimlane, Siemplify and other SOAR platform providers offer partner programs that allow MSPs and MSSPs to deliver SOAR services.