DATASHEET

Ivanti Neurons for App Security Orchestration& Correlation (ASOC)
Extend risk-based vulnerability management to the application stackthey must first gather a range of disparate data —Evolve vulnerability management for yourapplications to a risk-based approach with Ivanti
Neurons for ASOC. This SaaS offering enables
you to make fast, informed decisions on whereto direct development to improve the security ofinternal and customer-facing applications.

Risk-based vulnerability
management must include apps

SAST, DAST, OSS and container scanner findings,
threat intelligence and more — normalize that dataand prepare it for use. When done manually, theseprocesses take weeks to complete and are prone tohuman error.

aren’t rated Critical under CVSS v3 and 156 are
missing from the CISA Known Exploited Vulnerabilities(KEV) catalog. Additionally, three highly popularover the same period. No wonder identifying thevulnerabilities.2

vulnerability management — they’re drowning in data.

On top of all that, a lack of cooperation between
involved teams has been cited as the top challenge
in defending against cyberattacks.3 This frictionbetween vulnerability management stakeholders canBefore such organizations can even begin prioritizing

slow remediation and leave the organization prone

vulnerabilities and weaknesses for remediation,

to attack.

ivanti.com/neurons

capabilities come packaged in a single interface so
you can phase out the ‘swivel chair’ approach that’s
the past.

signatures for a combined 20 ransomware

for organizations using traditional approaches tocapabilities found in Ivanti Neurons for ASOC. These

ransomware vulnerabilities. Seventy-four percent

tripled in 10 years. Scan cadence has increased 20x

stack that poses significant risk is a slow process

management for your application stack with thedefined vulnerability management practices ofscanners still haven’t added plugins and detection

rare vulnerability or weakness in their application

Adopt a risk-based approach to vulnerability

The prioritization process is no better. Consider

The number of applications scanned per quarter has1

Introducing Ivanti Neurons for ASOC

Key capabilities
Achieve full-stack visibility of application riskexposure
Gain full-stack visibility of application risk exposure
from development to production. Ivanti Neurons for
ASOC unifies all application scan data — SAST, DAST,OSS and container — to locate vulnerabilities andweaknesses and prioritize remediation.

correlates them to active threats trending in the wild,

Prioritize immediate actions based on
threat risk

enabling users to know immediately which findings areMove from detection of vulnerabilities andvulnerability and scan findings and then continuously

the greatest risk to their organization. Users can also
drill down to the exact code locations where thosefindings reside within the application stack.

— with a contextualized, risk-based view of yourorganization’s cybersecurity posture. Ivanti Neurons

Further, the product’s Application Security Dashboard
lets users view the progress of application
development in addressing security debt by offering acomprehensive view of the vulnerabilities, CWEs and
OWASP findings that expose organizations, along withthe balance of new scan findings and the rate in which
they are remediated.

weaknesses to remediation in minutes — not months

for ASOC measures risk and prioritizes remediation
activities through a process that involves continuouscorrelation of an organization’s applications with:■ Internal and external vulnerability data.
■ Threat intelligence.
■ Manual pen test and research-based findings.
■ Business asset criticality.

Best of all: you arrive at a fully informed plan of attack
with little to no manual effort required.
Further, unlike CVSS, Ivanti’s proprietary Vulnerability
Risk Rating (VRR) lets organizations accurately
measure impact and determine the likelihood avulnerability will be exploited. Ivanti Neurons for ASOC
Ivanti Neurons for ASOC is scanner agnostic, allowing
DevOps to select the various scanning tools needed
across the different parts of the development
lifecycle. The product normalizes all application

also specifically identifies remote code execution,privilege escalation, ransomware, and trending
and active vulnerabilities. This information helps
organizations focus on those vulnerabilities that posethem the most risk.

Ivanti Neurons Patch for App Security Orchestration & Correlation | DATASHEET

2Focus on remediation, not administration
Improve your cybersecurity posture without all theEnable better collaboration amongst security
stakeholders

time, effort and errors traditionally associated with

Cultivate communication and cooperation among

doing so through a range of automations and othersecurity stakeholders from across the organization

efficiency-enhancing features:by providing them with timely information relevant to■ Create playbooks to automate common orrepetitive tasks traditionally handled by security
analysts.
■ Set vulnerability closure due dates automatically if

desired with service-level agreement automations.
■ Receive near-real-time alerts outside the productthat link back to a product page containing
information related to the subscribed event.
■ Easily filter applications and applications findings

by trending criteria that reveal their exposure to
the top critical vulnerabilities — like ransomware
and trending CVEs — using system views pushed
by the Ivanti security team.

their roles. Ivanti Neurons for ASOC employs rolebased access control (RBAC) so product access canbe safely provided to all applicable personnel.
Once inside the product, users have access todashboards designed for personnel from the SOC
to the C-suite. They can modify these dashboards
to fit more specific use cases, or even leverage userwidgets to create custom dashboards that meet theAdditionally, the product quantifies an organization’s

exact needs of different roles and teams.

risk profile in the form of an Ivanti RS3 score. Thisscore ensures all security stakeholders are inalignment on the organization’s overall security level.
Bidirectional integrations with ticketing systems like
Ivanti Neurons for ITSM improve coordination between
those working to improve that security level.

Ivanti Neurons Patch for App Security Orchestration & Correlation | DATASHEET

3Features & functions
FeatureDiverse data sources

Threat engine

Vulnerability Risk Rating (VRR)

Ivanti RS3Automation

Alerts and notifications

Customizable data organization

Dashboards

Threat-based views

Function
Achieve a wide view of cyber risk with a product that ingests data from application scanners (SAST, DAST, OSS, container),vulnerability findings from 100+ sources, manual findings from research and pen testing teams, and custom data sources.
Gain unparalleled insights on vulnerabilities — like which are tied to ransomware — via human-generated and AI-driven threat
intelligence sourced from Ivanti Neurons for Vulnerability Knowledge Base.
Quickly determine the risk posed by a vulnerability with numerical risk scores that consider its intrinsic attributes and realworld threat context.
Attain a quantified view of your organization’s risk profile via a proprietary scoring methodology that considers VRR, asset
business criticality, threat intelligence and external accessibility.
Replace a range of manual tasks with automation so employees can focus on remediation actions and strategic initiatives
rather than administration.
Gain instant awareness of pertinent events via near-real-time alerts sent from a notification engine. Similarly, direct other users
to important information within the product using deep links.
Uncover actionable insights with user widgets that allow for the creation of custom dashboards, plus the ability to pivot data inlist views.
Realize superior visual query and risk discovery capabilities across assets and infrastructure via readymade and customizable
dashboards equipped with drill-down capabilities.
Quickly discover how top critical vulnerabilities — like Log4j and those associated with Patch Tuesday releases — manifest
themselves in your environment by utilizing threat-based views. Also create and share your own custom views.
Pair Ivanti Neurons for ASOC with Ivanti Neurons for RBVM to extend risk-based vulnerability management across a greater

Neurons integrations

area of your attack surface. Leverage an out-of-the-box integration with Ivanti Neurons for ITSM to empower vulnerability
management practitioners throughout the organization to perform their tasks more efficiently and effectively.

Ivanti Neurons Patch for App Security Orchestration & Correlation | DATASHEET

4

About Ivanti
Ivanti elevates and secures Everywhere Work sothat people and organizations can thrive. We maketechnology work for people, not the other way around.
Today’s employees use a wide range of corporate
and personal devices to access IT applications

For more information, or to contact Ivanti,
please visit ivanti.com

and data over multiple networks to stay productive
wherever and however they work. Ivanti is one ofthe only technology companies that finds, manages,
and protects each IT asset and endpoint in anorganization. Over 40,000 customers, including 88
of the Fortune 100, have chosen Ivanti to help themdeliver an excellent digital employee experienceand improve IT and security team productivity andefficiency. At Ivanti, we strive to create an environment
where all perspectives are heard, respected, andvalued, and we are committed to a more sustainable
future for our customers, partners, employees, andthe planet.
For more information, visit ivanti.com andfollow @GoIvanti.

1.

Copyright © 2023, Ivanti. All rights reserved. IVI-2673 10/23 NH

Veracode, “State of Software Security v12”, 2021. https://info.veracode.com/report-state-of-software-securityvolume-12.html
2. Cyber Security Works, Cyware, Ivanti, Securin, “2023Spotlight Report: Ransomware Through the Lens ofThreat and Vulnerability Management”, 16 February 2023.
https://www.securin.io/ransomware/
3. ExtraHop, “Cyber Confidence Index 2022”, 1 March 2022.
https://www.extrahop.com/resources/papers/cyberconfidence-index-2022/