SOLUTION OVERVIEWTENABLE FOR CYMULATEREDUCE CYBER EXPOSURE WITH BREACH& ATTACK SIMULATION

BUSINESS CHALLENGEAs the dynamic attack surface expands and becomes more complex,organizations need better ways to test and ensure they have the best possible
security posture. Without adding Breach & Attack Simulation (BAS) to theirsecurity program, organizations are unable to launch cyber-attack simulations
that evaluate an organization’s security posture and provide remediation
guidance. The simulations include the very latest attacks immediately after they
are identified in the wild – immediate threats, and potential paths an attacker
can exploit within a compromised organization.

SOLUTION
The Cymulate breach and attack simulation platform combines Tenable’s
vulnerability findings to provide a comprehensive security assessment. This
assessment correlates vulnerability findings to attacks techniques found in
immediate threats and used by hackers to compromise and move laterally within
an organization. It maps known vulnerabilities and vulnerable machines to thesimulated attacks. Breach & Attack Simulation adds the context of an attack,providing an additional dimension to help prioritize vulnerability remediation.

VALUE
The Cymulate integration for Tenable provides the ability to:• Correlate Tenable vulnerability data and Cymulate’s attack techniques
for a stronger lateral movement assessment

TECHNOLOGYCOMPONENTS• Tenable.io/Tenable.sc 5.11 or higher• Cymulate Breach & Attack
Simulation platform

KEY BENEFITS• Enrich Cymulate platform withTenable vulnerability data
• Add additional insights toCymulate’s lateral movement
assessment & immediate threats• Unified visibility and reporting ofTenable’s findings with Cymulate’sattack simulation• Correlate Tenable vulnerability data and Cymulate immediate threats - known
and new attacks found in the wild

• Prioritization of mitigation efforts
according to user privileges and the typeof asset identified in a lateral movement
simulation or an attack• Combined results can provide a comprehensive assessment of detected actualand potential attack patterns that can be used inside a targeted network• Faster mitigation of potential paths toan organization’s most critical assets• Identify machines that can potentially be exploited using known CVEs and othervulnerabilities along a simulated lateral movement route or in actual attacks• Validate misconfigurations, weak passwords and vulnerabilities in a network andfind out which vulnerabilities pose the greatest threat of exploitation

ABOU T T EN A B L E
Tenable®, Inc. is the Cyber Exposurecompany. Over 30,000 organizations
around the globe rely on Tenable
to understand and reduce cyberrisk. As the creator of Nessus®,
Tenable extended its expertise invulnerabilities to deliver the world’s
first platform to see and secure
any digital asset on any computing
platform. Tenable customers include
more than 50 percent of the Fortune
500, more than 30 percent of theGlobal 2000 and large government
agencies. Learn more atwww.tenable.com.

HOW IT WORKS
The diagram below shows the flow of an integrated
Cymulate-Tenable assessment:
1. Organization regularly runs vulnerability assessments using Tenable.
2. Organization regularly runs lateral movement attack simulations and 		
immediate threats using Cymulate.

3. Cymulate Agent pulls vulnerability assessment results from Tenable via API.
4. Cymulate Agent combines results from both Tenable and Cymulate to create acomprehensive view with insights and a prioritized plan.

5. Combined report is generated locally (and can be uploaded to the cloud, as well).

ABOU T CYMUL AT E
Cymulate is a leader in Breach &Attack Simulation. The Cymulate
platform lets you protect yourorganization at the click of abutton. Operating thousands ofattack strategies, Cymulate shows
you exactly where you’re exposed,
and how to fix it. The advanced
technology enables organizations toautomatically validate their security
posture, increase the value fromexisting security products andimprove security on a continuous
basis. Learn more at cymulate.com

CUSTOMER FW
Tenable.io (in the cloud) orTenable.sc (on-prem)

Vulnerability scan
results are pulledusing Tenable API

CYMULATE FW*Option to upload report data to thecloud is available. If selected, reportwill be accessible in Cymulate App

1

AWS CYMULATEPRIVATE CLOUD

Cymulate Agenton dedicatedworkstation

Cymulate App
ManagementServer2

Organization
environment

INTERNET

Cymulate security
assessment report
is generated locally

Cymulate
Database

Cymulate
AttackServers

MORE INFORMATION
You can get the latest apps:https://www.tenable.com/products/tenable-io/evaluate
https://cymulate.com/free-trial-sales/
For support please contact: support@cymulate.com

COPYRIGHT 2021 TENABLE, INC. ALL RIGHTS RESERVED. TENABLE, TENABLE.IO, NESSUS, ALSID, INDEGY, LUMIN, ASSURE,AND LOG CORRELATION ENGINE ARE REGISTERED TRADEMARKS OF TENABLE, INC. OR ITS AFFILIATES. TENABLE.SC,TENABLE.OT, TENABLE.AD, EXPOSURE.AI, AND THE CYBER EXPOSURE COMPANY ARE TRADEMARKS OF TENABLE, INC. ORITS AFFILIATES. ALL OTHER PRODUCTS OR SERVICES ARE TRADEMARKS OF THEIR RESPECTIVE OWNERS.

Solution Overview / Cymulate / 041222