Onboarding new hardware can introduce unknown risks and attack surfaces deep in the hardware and firmware of endpoints, servers, and network devices. Eclypsium scans devices to assure they’re up to date and free of vulnerabilities before you deploy them into production.
“The most important thing for us is to make sure that all the technology that we bring in from an AcquiredCo is safe for us. For DO, we don’t just think of ‘us’ as our business. We focus on the safety of our customers, our business, and the entire Internet. When integrating an acquired company, we have to know that each device can be trusted before we can even begin to deploy our images and code on new end-points.”
– Tim Lisko, Senior Director of Security Engineering, DigitalOcean
Nothing should get plugged into your enterprise network without acceptance testing. From laptops to enterprise switches, technology ships with outdated and vulnerable software, firmware, and hardware all the time.
Hidden attack surfaces, vulnerabilities, and intentional backdoors can all be introduced into enterprise computing and networking devices before they reach your loading dock. But that isn’t the only way new, risky devices make their way into your infrastructure. Mergers and acquisitions can lead companies to connect disparate IT systems and bring unknown, insecure devices into privileged networks. BYOD policies bring in unmanaged devices with unknown risks. Secure onboarding is foundational for hardware supply chain security.
The DoD has estimated that 15% or more of spare equipment in their reserves is counterfeit.
If counterfeits, or secondary-market gear mislabeled as “new” gets into your systems, it can introduce unknown attack surfaces, data, and malware.
Read a case study about a major global satellite communications provider that discovered counterfeit network gear in their environment, using Eclypsium.
Enterprise gear contains an increasing number of open source dependencies and programming languages.
As Log4J and XZUtils, and the recent CopyFail vulnerability showed us, even low-level, widely distributed libraries can bring critical risk into enterprise environments if their open-source development chain is compromised, or simply misses a vulnerability.
Read how Eclypsium is building the future of supply chain backdoor detection.
Every network device, server, and laptop has dozens of hardware components. Some of these, such as Baseboard Management Controllers and Smart NICs, may contain an entire operating system. A computer within a computer.
These may be intentionally loaded with malware and backdoors, or inadvertently left vulnerable even if the main OS of the device is patched.
Read more about component vulnerabilities and how Eclypsium detects them.
Eclypsium Assures You that devices have not been tampered with, and are as-expected when delivered.
Case Study: Learn how Digital Ocean saved millions during a company acquisition by validating that the acquired company’s devices were secure so they didn’t have to buy new gear. Read the Case Study.
Try our guided product tour to learn how Eclypsium monitors and secures your IT asset inventory throughout its entire lifecycle.
