Nonetheless, the attacks have user companies scrambling to reassess their security products and methods. Key to the offering are some proprietary tools RIPTech developed to extract and analyze security data. RIPTech's import engine pulls log data from each managed device into a SQL database at RIPTech's data center in its Alexandria, Va., headquarters. The company's query engine then examines the data to find any suspicious activity.
Customers can also opt for email notification about some or all security events.
Part of what makes the RIPTech offering effective, Yoran says, is that the company aggregates data from numerous security devices into a coherent whole. It also provides analysis, separating the false positive alerts from the serious security issues. Additionally, based on its findings, RIPTech will recommend patches and other changes that should be applied to security devices. This constant updating of security equipment is a task that many companies leave undone, Yoran maintains. Smaller companies can rely on the offering as a turnkey security service.