Israeli attack surface management startup Ionix Inc. today announced the release of Cloud Exposure Validator, a new tool that helps security teams manage alerts generated by cloud security platforms.

The validator analyzes and reorders alerts from cloud security tools such as those from Wiz Inc. and Palo Alto Networks Inc. based on actual exploit and severity. The result gives organizations the ability to allocate resources to address the most critical issues first.

The problem Cloud Exposure Validator is trying to address is a well-known one: Chief Information Security Officers and teams struggling with the expanding use of the cloud and the dynamic nature of cloud infrastructure leading to an increased attack surface. Adding to the mix is ​​the problem of different teams creating silos to address vulnerability management and cloud security, adding an overwhelming volume of alerts and vulnerabilities with no way to prioritize them to a manageable level.

The Ionix Cloud Expsure Validator aims to address these issues by enabling CISOs and their team to integrate exposure management with cloud security tools. By enriching discoveries with exploitable vulnerabilities and contextual attack surface information, security teams can prioritize alerts that pose a real risk. Notably, the solution can also redefine low-risk findings as high or critical, and validate that high-risk findings may not have external exposure and can therefore be ignored, the company says.

Ionix claims that early adopters of the new service have found that most of their findings on cloud security for Internet-facing assets can be rearranged. By integrating with Ionix external exposure data, the company provides a unified security assessment for on-premises and cloud environments. This allows security teams to correlate security signals coming from multiple tools and teams into one central source for external risk validation.

Key benefits of Ionix Cloud Exposure Validator include improved prioritization of security incidents. With the integration of Ionix statistics, the idea is that security teams can focus on the most critical and exploitable vulnerabilities, effectively optimizing resource allocation across cloud and on-premise infrastructure.

The validator also provides contextual intelligence, providing a holistic view of an organization’s external attack surface that enables teams to understand how broader factors influence identified vulnerabilities. The result leads to more informed decisions about their security posture, whether the infrastructure is cloud-based, hybrid or on-premise.

Another feature, operational efficiency, sees the Validator reduce false positives and noise in security alerts. The service unifies visibility across domains, creating a bridge between different tools and security teams.

“Ionix Validator brings all exposure management, prioritization and validation capabilities, simplifying operational challenges to help separate real cloud threats from the noise,” said CEO Marc Gaffan. “Now, both cloud and vulnerability management teams can make more informed decisions about how to best use resources to effectively protect assets across the entire attack surface.”

Ionix, which was previously known as Cyberpion, is a venture capital-backed startup that has raised $50.3 million in funding. conformable Tracxn. The company’s investors include US Venture Partners LP, Team8 Capital and Hyperwise Ventures Inc.

Image: SiliconANGLE/Ideogram