Devo Technology acquires threat hunting provider to build next-gen autonomous SOC

Right now, cloud-native logging and safety analytics supplier Devo Technology introduced that it had acquired autonomous menace looking firm Kognos. With this acquisition, Devo goals to maneuver towards creating the idea of an “autonomous SOC,” to mix its cloud-native analytics and detections functionality with the Kognos AI engine. 

Kognos’s menace looking platform makes use of superior attack-tracing AI that may mechanically triage and examine menace alerts to create assault tales, in order that human analysts can handle safety incidents with out getting caught up on repetitive handbook duties that enhance stress. 

For organizations, the answer affords the potential to automate security duties in order that human safety groups can function extra effectively with much less likelihood of burnout and churn.  

Automating burnout away 

The acquisition comes as safety analysts have gotten increasingly more troubled by burnout, with research displaying that greater than 70% of SOC analysts are experiencing burnout with 60% saying their workloads have spiked over the previous yr. 

One of many core causes for this unmanageable workload is that safety analysts must spend hours on inefficient handbook duties, with 64% of analysts reporting that handbook work eats up greater than half of their time. 

Kognos’ resolution to this drawback is to make use of AI to triage and examine menace alerts in order that human analysts don’t must waste time investigating false constructive incidents and gathering intelligence manually. 

“Cybersecurity requires you to mix real-time streaming with huge information analytics. Devo has constructed probably the most scalable and financial platform safety analytics within the business to deal with this want, one thing legacy options haven’t been in a position to resolve,” stated Devo Expertise’s CEO, Marc van Zadelhoff. 

The standard CISO or SOC has 200 safety instruments from 40 completely different distributors, however the one which they have a look at day-after-day is Devo, as a result of Devo brings every little thing collectively — Devo takes petabytes of information, analyzes it and shows it in a approach that reveals the SOC what’s really taking place, in actual time,” Zadelhoff stated. 

The safety automation market 

Safety automation is now in a relentless state of progress. The Security Orchestration Automation and Response Market alone is anticipated to achieve a price of $2,027.2 million by 2025 as extra organizations apply automated safety instruments. 

One safety automation supplier that’s competing with Kognos is Splunk, which gives a platform for customers to look information from sources all through their networks and automate handbook safety duties. Final yr, Splunk additionally introduced an investment of $1 billion. 

One other competitor is LogRhythm, a Safety Data and Occasion Administration (SIEM) platform that permits safety groups to automate handbook duties and leverages machine studying to enhance the accuracy of menace detection. LogRhythm most just lately raised $50 million in 2016. 

Nevertheless, Zadelhoff argues that the supplier’s cloud-native capabilities separate it from rivals. 

“Our rivals can’t match Devo’s cloud-native pace and scale,” Zadelhoff stated. “Our prospects get prompt entry to 400 days of sizzling information for richer menace investigations and hunts, we extra seamlessly adapt to information adjustments and sources, and now with Kognos, automated menace investigations are taken to a brand new degree by bringing full assault tales to the desk.”