netForensics helps organizations build the "sense and respond" environment needed to improve threat identification, reduce risk, and meet compliance requirements. netForensics products, services and best practices optimize security operations by creating a Security Information Management (SIM) backbone that transforms raw security event data into actionable information to help organizations.
The Beginning
Having introduced the industry’s first solution in 1999, netForensics continues to set the standard for enterprise Security Information Management (SIM) with over 400 customers – more than any other SIM vendor today. netForensics is a privately held company.
The Success Team
Dennis Cline, Chief Executive Officer
Rich Benvenuto, Acting Chief Financial Officer
Dale Cline, Executive Vice President, Operations
Frank Pinello, Vice President, Global Sales
N. Reddy Velagala, Vice President, Engineering
The Products
nFX Open Security Platform (nFX OSP) is netForensics' flagship Security Information Management (SIM) solution
"With the growing number of security appliances and applications in enterprises of all sizes, IT staff has a horrendous responsibility of analyzing numerous variety of reports and make any sense out of them. netForensics solutions simplify the entire process through an automated intelligent diagnostic, analysis and response system for a variety of risk scenarios enabling proactive action against all vulnerabilities and attacks."
Rick Justice, Chief Editor
What makes netForensics a "Hot Company" 2006
Products & Technologies
Technology Innovations
nFX OSP's flexibility allows for easy mapping to any compliance framework. Currently we provide pre-defined asset groups and system rules for SOX, HIPAA, FISMA and GLBA enabling organizations to quickly identify (TAG) key assets subject to regulation, and ensure effective decision support for incident response (IRM) and monitoring on critical compliance assets. nFX OSP compliance reports supply information specific to verified events that may compromise critical systems. These reports along with the raw data can be archived as part of the organization’s compliance program. Translated to a business example, this could be the ability to know if someone has altered a financial control file in some unauthorized way which potentially could have triggered a bogus bank wire being issued for $1M.
The nFX OSP architecture is fully federated N-tier architecture for high performance and scalability across any network, regardless of how many locations are involved in an implementation. This ensures that there is no single point of failure, and that the application can be efficiently distributed to optimize performance based on users and event volume; the multi-tier architecture also allows organizations to minimize hardware requirements and easily expand the SIM infrastructure as business requirements change without performance degradation. To support that architecture, nFX OSP supports multiple forms of failover, load sharing and self-healing administration.
By combining all three types of correlation (statistical, rules and vulnerability) with asset valuation, netForensics provides security analysts with a true risk profile for each security event, while reducing the organization’s total risk exposure over time. To do this, the nFX Open Security Platform is the only solution on the market that directly correlates vulnerability correlation without writing rules. This means that security teams can reap the benefits of vulnerability correlation right away, and don’t have to lose time writing and maintaining rules to get the most valuable method of identifying attacks in place. Also, netForensics is the only SIM vendor to integrate, rather than simply report on, asset valuation, statistical, rules based, and vulnerability correlation to speed threat identification and reducing risk by providing a true picture of risk based on business impact.
netForensics has added an embedded Incident Response Management system to nFX OSP. This innovation allows security analysts to manage the entire security workflow, including ticketing, role assignments and evidence gathering, from within the system – avoiding the necessity to involve non-security personnel and following industry accepted best practices.
In February 2004, Security Posture Analysis and threat scoring were added, furthering the concept of ongoing risk analysis
August 2004, netForensics expanded the definition of SIM to include managing for compliance and incorporates endpoint analysis data from Cisco’s Network Admission Control initiatives into the product.
People & Investors
The company is led by
Dennis Cline and he has also been an active board member since 2004.
In November 2003, Nomura International Bank invested in the netForensics vision, joining earlier investments from Cisco Systems, Comcast, Storm Ventures and Dawntreader.
Performance & Growth
October 2004, netForensics introduced vulnerability correlation functionality as well as an embedded knowledge base into nFX OSP. In addition, netForensics announced that it now supported over 1,000,000 device licenses for its customers.
May 2005, netForensics achieved the highly coveted EAL2 certification, meeting acquisition and deployment requirements for Federal Government agencies.
Deloitte Fast 50 for 2003, 2004 and 2005 – All in the top 5 as the fastest growing technology company in New Jersey based on sales revenue growth. In 2004, netForensics was #1 with a 5-year growth of over 3700%
Red Herring Top 100 – 2004, 2005
Computerworld Honors Collection Medal of Achievement for Technology Innovation
Various technology awards, including the Network Computing Well Connected award, SC Magazine Global award, Best of Interop
Potential & Strategies
In June 2003, Cisco Systems agreed to OEM nFX OSP and branded it CiscoWorks SIMS, opening a brand new global channel for netForensics
In June 2004, netForensics and HP partnered to incorporate netForensics into HP OpenView, leveraging available resources within the network monitoring world and further increasing ROI
July 2005, netForensics expanded its relationship with HP to include strategic partnering for services and new compliance-specific reporting. This further defines the value proposition for Compliance related reporting and, more importantly, moves the requirements definition to the business line as well as IT.
netForensics, Inc.
200 Metroplex Dr.
Edison, NJ 08817 USA
Tel: (732) 393-6000
www.netforensics.com
