FireEye Market, Expertise On-Demand To Boost Security Collaboration
FireEye has rolled out an assortment of free tools, shared knowledge, security expertise and on-demand services to advance community-based protection from cyber attacks.
The Milpitas, Calif.-based platform security vendor said the new FireEye Market, Expertise On-Demand and Incident Response Retainers will expand collaboration and empower collaboration before, during and after a cyber incident.
"Many organizations face the same cyber threats, so we all benefit from knowledge and resource sharing, as well as collaboration and the creation of tools and applications," Kevin Mandia, FireEye's CEO, said in a statement. The new tools were announced during the FireEye Cyber Defense Summit in Washington D.C.
[Related: FireEye To Launch Marketplace To Gather Tools, Apps In One Place]
The FireEye Market allows users to browse and search all of the existing content that the company makes available today in a single place through an intuitive user interface. The platform will initially focus on existing open-source software, freeware and community developed tools, according to the company
In the future, customers and partners will be able to contribute to the FireEye Market themselves, creating integrations and submitting their own new applications, plug-ins and extensions. New content will be continually added as it's reviewed and approved for use, according to the company.
"It is not possible to have perfect security, and nearly every organization has difficulties amassing the capabilities they require," Mandia said. "Therefore, delivering a community driven defense is an essential component of effective cyber security."
FireEye is additionally introducing access to a community of company experts as a way for organizations to gain the expertise they need, when they need it, without forcing them to add full-time staff. Expertise On-Demand will provide flexible access to the company's wide range of industry-recognized security expertise, threat intelligence and cyber-readiness services, according to FireEye.
Subscriptions to Expertise On-Demand are currently available to existing FireEye customers, and include daily news analysis, access to FireEye threat analysis tools, and invitations to exclusive quarterly Threat Intelligence Briefings.
Finally, the FireEye Mandiant Incident Response Retainer establishes terms and conditions for incident response services before a cyber attack is suspected, which the company said significantly reduces response time and the impact of a breach. With a retainer in place, Mandiant services professionals are always on standby, FireEye said, reducing or eliminating the need to staff and in-house response team.
The retainer establishes terms and conditions for incident response services, according to FireEye, defining hourly rates and associated technology fees. There is no financial commitment or annual cost, FireEye said, with charges incurred only upon declaration of an incident based on time and materials used.
Customers, though, do have the option of purchasing a pre-paid block of incident response hours at a discounted hourly rate for use on a wide range of technical and strategic consulting services, the company said. Unused hours can be repurposed, according to FireEye.
The company first announced plans for FireEye Market during an August earnings call and indicated that the company had already built more than 40 apps internally addressing topics ranging from User and Entity Behavior Analytics (UEBA) to going through PCAP data faster. There may be apps in the market that FireEye charges for, Mandia said in August, though that isn't expected to happen right away.
FireEye Market should advance community defense in verticals such as financial services since companies in this area often find themselves dealing with similar cybersecurity issues, Mandia said at the time.