Demisto：获融$43M 致力SOAR

CHRIS O'BRIEN 网络安全投资

【181010 VentureBeat】Demisto announced today that it has raised $43 million as the company tries to simplify the management of security even as the complexity of threats and tools multiplies.

The company has helped carve out a spaced dubbed “Security Orchestration, Automation and Response” or SOAR. It’s a concept that refers to coordinating the teams and tools a company has for defending itself against hackers and other digital threats.

“There are a lot of security tools and not enough manpower,” said Demisto CEO Slavik Markovich. “We thought Slack was pretty cool, and we thought managing security should be like that. Sharing and talking to each other should be as easy as chatting on Slack.”

The SOAR space is still somewhat new, but gaining growing recognition from investors and enterprise customers. Earlier this year, Splunk acquired Demisto’s rival Phantom for $350 million

. According to 451 Research

, the issue facing many enterprises is that labor represents about 40 percent of their cybersecurity costs, but teams are often inefficient, chaotic, and slow to respond to security notifications.

That’s precisely the problem Demisto set out to solve when it was founded in 2015.

Today, Demisto offers both a version that companies can install internally, or a cloud-based version. The service offers a visual dashboard that centralizes all the information being generated by the range of security products deployed and keeps all people involved in security at a company in constant contact.

When some part of the system throws off a notification about a potential security issue, Demisto enables team members to quickly assign responsibility and respond to the issue. Using its machine learning, it then generates a playbook for how the company should respond in the future, and in many cases even can automate those responses.

“You get an alert but how do you go about resolving that alert?” Markovich said. “No one has a way to follow-up and make sure it’s executed the way it should be executed. So we collect those alerts, and then create a playbook that allows you to automate a larger part of the incident resolution part. And if there’s a step that needs to be done by a human, we make sure that’s being done in a way that’s following the playbook.”

As security team members discuss and debate issues, or how to respond, Demisto also provides a chatbot that can help answer questions and facilitate the discussions. Demisto says its service has helped some customers cut instances where a human needs to intervene by as much as 95 percent.

The round was led by Greylock Partners, which has a long history backing security startups. Additional investors participating in this funding round include early investors Accel Partners, ClearSky Security and others, bringing total funding to date to $69 million.

“There are lots of interesting problems to solve in security,” said Sarah Guo, General Partner at Greylock Partners. “At Greylock, we try to focus on problems that are important enough or strategic enough to support a large company. Modern security is all about operations, tool fragmentation, and people management. These are not necessarily the sexiest problems to solve on the surface. But I think Demisto has a category defining product that has the right integration and workforce automation to enable collaboration.”

The company plans to use the money to expand its marketing and customer acquisitions efforts, as well as to continue to develop the product and add new features, Markovich said.

Demisto：获融$43M 致力SOAR

发送到看一看