Bit9 recently merged with Carbon Black, a move that, in the newly-formed company’s words, makes it the only one capable of detecting advanced threats on endpoints and servers to provide incident responses in seconds.
It’s a bold claim, and one that it plans achieve by combining Bit9’s endpoint/server advanced threat prevention solution with Carbon Black’s incident response solution to let organisations respond to incidents in real time.
Bit9 has raised $38.25 million to fuel the combined companies’ growth. TechRadar Pro spoke to Mike Viscuso, chief strategy officer of Bit9 and former CEO of Carbon Black, to find out more.
TechRadar Pro: What does the merger mean for enterprises?
Mike Viscuso: Bit9 + Carbon Black means that enterprises will, for the first time, have the ability to prevent, detect and respond to advanced threats using a single product. By merging our organizations and our technologies, we’re empowering enterprises with the most complete solution for advanced threat protection on the market – one that accounts for EVERY step in the security lifecycle.
TRP: What is the overall vision/goal for Bit9 and Carbon Black? What does Bit9 and Carbon Black want to achieve in next 10 years?
MV: The Endpoint Threat Detection and Response (ETDR) market is moving at a lightning-fast pace right now, which is great news for organizations looking to better protect themselves. With this merger, we’ve positioned ourselves as a leader in front of the market.
The recent $38.25M investment in our combined company enables us to accelerate our technology roadmap so we are consistently delivering the most advanced and comprehensive solution available.
TRP: What are the biggest challenges in making this merger work?
MV: One of the biggest challenges we’ve both faced, independently, has been in converting some of the nonbelievers still out there. Unfortunately, there are still some organizations that have yet to adapt an evolved security posture – one that extends beyond traditional antivirus and accepts the inevitability of a data breach.
Since the synergy of our combined team has been electric thus far, we have no doubt our efforts to better educate the market about prevention, detection and response will mean a more evolved security posture for the entire market.
Adequately educating the market is a challenge we are excited to meet because it’s critical that organizations realize that antivirus cannot protect them and their customers against today’s advanced threats, including zero-day and targeted attacks.
TRP: What will Bit9 look like once the merger is complete?
MV: As the leader in advanced threat protection for endpoints are servers, Bit9 will continue to grow our technology and our people to reflect that position. In adding the full Carbon Black team to the mix we are increasing our "offensive security" DNA an order an magnitude and vastly enhancing the detection and response capabilities in our technology.
TRP: Do you see a gap widening between traditional defences such as anti-virus and advanced threat protection?
MV: Absolutely. Simply put, traditional antivirus no longer cuts it. Bit9 + Carbon Black offers the industry its most complete solution for advanced threat protection for endpoints and servers.
We’re helping organizations protect themselves from advanced threats in two critical ways: by reducing their attack surface through new signature-less forms of prevention, and rapidly detecting and responding to threats.
We do this by leveraging the powerful combination of Carbon Black’s lightweight endpoint sensor, which can be rapidly deployed with no configuration to deliver "incident response in seconds," and Bit9’s industry-leading prevention technologies to continuously monitor and record all activity on endpoints and servers and stop cyber threats that evade traditional security defenses.
TRP: How did you raise the $38.25 million and how will it be used to drive the companies’ growth?
MV: The funding was led by existing Bit9 investor Atlas Venture and included all other current Bit9 investors—.406 Ventures, Highland Capital Partners, Kleiner Perkins Caufield & Byers, and Sequoia Capital—and a direct investment by Blackstone, an investor in Carbon Black.
This funding will be used to accelerate our technology roadmap to stay ahead of the market and continue to deliver the most advanced threat protection solution available.
TRP: What will be your key USPs?
MV: Prevention. Detection. Response. Bit9 + Carbon Black will deliver a solution that provides all three in a single product. No other company on the market can say that.
TRP: What’s the next step for Bit9 and Carbon Black?
MV: We’ve hit the ground running and we have no plans to slow down anytime soon. Next week, we will be announcing some exciting partnerships and technology integrations and shortly after that, we will be at the RSA Conference in San Francisco as a combined company, providing demos on our new product and meeting with industry leaders.
TRP: What are the key features of Carbon Black’s incident response technology?
MV: Carbon Black is "always-on." The lightweight sensor continuously monitors and records every endpoint in the enterprise, giving security teams the ability to detect and respond to threats in seconds.
By maintaining a full recording of the data collected (the exact data needed during a response) security and IR teams are able to "roll back the tape" and immediately gather a complete understanding of an attack lifecycle, even if the attack occurred months ago.
TRP: Are enterprises doing enough to protect their endpoints and servers?
MV: Some are, most are not. Unfortunately, we’ve read too much in the news lately about organizations that are not adequately protecting themselves—and their customers.
It’s our belief that advanced threat protection involves three key elements: prevention, detection and response. It’s our goal to equip the market with everything it needs to protect every endpoint and server.
How critical is incidence response for the next generation of IT?
We do not hesitate to say that incident response is critical to the current generation of information security. Response is one of the three major components of the Bit9 + Carbon Black solution and it should not be overlooked by enterprises looking to improve their security postures.
Organizations that fail to prepare for the inevitable data breach will incur a recovery cost that could cripple their businesses. Preparing to respond, with the right kinds of data, is a key element of evolved security and may save a business hundreds of thousands of dollars when they are breached.