DFLabs has announced a new version of its IncMan security orchestration, automation and response (SOAR) platform at this week's RSA Conference in San Francisco, California.The new release will enable MSSPs and managed detection and response (MDR) providers to simultaneously manage security operations across multiple customer environments, regardless of the security products deployed at each customer site, DFLabs claims.IncMan SOAR's new features include vendor-agnostic runbooks that allow MSSPs and MDR providers to execute a single action across various customer environments, DFLabs said. At the same time, MSSPs and MDR providers can use IncMan SOAR to provide customers with control over what actions are allowed in their respective IT environments.In addition, the new version of IncMan SOAR enables MSSPs and MDR providers to allow customers to determine which intelligence, playbooks, runbooks and other information can be shared, according to DFLabs. This ensures MSSPs and MDR providers can help their customers comply with data security mandates.The new IncMan SOAR release also automates the collection and reporting of metrics and key performance indicators (KPI) across customer environments, DFLabs indicated. That way, IncMan SOAR provides visibility into customers' infrastructure and security posture.DFLabs is expected to release its new version of IncMan SOAR globally by the end of June.Context enrichment. Risk assessment. Threat containment. Threat hunting and investigation. Threat intelligence gathering. Triage and notification. Furthermore, IncMan SOAR provides an open integration framework for customizing and adding automated security integrations. It enables security teams to add and orchestrate functions between IncMan SOAR and third-party products and execute each security integration within a Docker container.Splunk added SOAR capabilities to its security information and event monitoring (SIEM) platform in 2018. Siemplify quadrupled its bookings & tripled its customer base in 2018, and launched a formal partner program for MSSPs and VARs in February 2019. Sophos acquired DarkBytes for managed detection & response (MDR), SOAR & MSSP services in January 2019. Syncurity's SOAR platform gained a SentinelOne integration in February 2019. Palo Alto Networks announced plans to acquire Demisto, a SOAR startup, in February 2019.
Channel partners, Content, Security Program Controls/Technologies
DFLabs Unveils SOAR Platform for MSSPs, MDR Service Providers
Dan Kobialka
Dan Kobialka is senior contributing editor, MSSP Alert and ChannelE2E. He covers IT security, IT service provider business strategies and partner programs. Dan holds a M.A. in Print and Multimedia Journalism from Emerson College and a B.A. in English from Bridgewater State University. In his free time, Dan enjoys jogging, traveling, playing sports, touring breweries and watching football.
You can skip this ad in 5 seconds