REQUEST A DEMO PRODUCTS Firmware Is Under Fire. Protect It. Eclypsium secures and protects the firmware your enterprise depends on: endpoints, network equipment, servers and connected devices. The Eclypsium platform identifies, verifies, and fortifies the mission-critical firmware that lies beneath every device. Eclypsium does it easily, in a SaaS platform with low or no overhead. Better still, it does it without drowning you in extra noise and useless alerts. Eclypsium Products Eclypsium for Endpoints Eclypsium for Servers Eclypsium for Network Devices Eclypsium Platform & Integrations Eclypsium Platform And Integrations Your IT ecosystem is complex and interdependent. It’s also a favored target for ransomware and malware and the stealthy, low-and-slow attacks that will cripple your business. Firmware is the new battleground. The Eclypsium platform allows you to identify, verify, and fortify the firmware throughout your IT stack through a comprehensive, common platform. The Eclypsium platform secures firmware in servers and microservers, laptops, desktops and workstations, network appliances such as routers, switches, gateways, VPN appliances, security appliances, Cisco IOS devices, and even specialized equipment like Automated Teller Machines and Point-of-Sale Terminals. The Eclypsium Platform integrates with hundreds of information security and IT operations tools, and its individual point solutions can be deployed as unique components or as part of an end-to-end firmware security suite. Enterprise-Class Design > Flexible Deployment Options Eclypsium’s SaaS-based platform is available in multiple configuration and deployment options. Varying levels of firmware scanning and assessment can be done through installed agents, agentless remote access, and hybrid approaches that transform select endpoints into network scanners. Simplified, Robust Architecture The Eclypsium solution consists of two primary components: Eclypsium Administration and Analytics Service, hosted in the cloud or self-hosted on-premises. The Analytics Service analyzes data received from monitored systems and provides a web-based management interface to administrators. Eclypsium Device Scanner (including kernel module/driver), deployed temporarily or permanently on target systems to monitor. The Scanner collects firmware and hardware information and uploads it to the Analytics Service. Multi-mode Device Scanning Eclypsium Scanners are part of the core platform and can be deployed in two different ways: in ephemeral mode or persistent mode, as a continuously running service. In ephemeral deployment mode, the Scanner is launched by an administrator or a third-party tool must launch it. In persistent mode, the Scanner uses a service which periodically collects data and scans firmware and hardware of the monitored system. It also performs a scan every time the monitored system boots. Device scanners can also be deployed as portable executables for Windows and Linux systems. SSO and Enterprise Authentication Users have the option to leverage OAuth2 authentication, either with Google SSO, Okta SSO or Ping SSO. Additionally, for environments that use Active Directory (AD), there is an option to configure user logins using LDAP/AD. A PKI-based authentication method allowing for single or multiple certificates per user is also available. Centralized Device Management Whether your organization is using the Eclypsium Platform to secure firmware in endpoints, servers, network devices or an entire fleet of enterprise of assets, it provides one consistent view of firmware integrity, vulnerabilities, and threats. Compliance Mapping and Configuration The Eclypsium Platform supports configuration and mapping of enterprise deployments to NIST standards (and compatible) standards such as NIST 800-53, NIST 800-147, NIST-155, NIST-193. Multiple Host Registration Methods Eclypsium hosts are registered using a Host Registration Token or a Data Collection Token, depending on your organization’s security and workflow requirements. Global Reputation Database The Eclypsium Platform leverages multiple types of reputation data in order to verify that all firmware components match vendors and haven't been tampered with. Local reputation can be used to automatically build and apply reputation for firmware components based on specifics of a customer environment to improve accuracy and minimize false positives. Integrations > Today’s modern defense-in-depth and Zero Trust architectures require consistent, easy and tight integration between IT tools and security systems. The Eclypsium Platform integrates ... Deployment Integrations Eclypsium scanners can leverage a wide range of deployment options, including Microsoft SCCM / SMS and Intune, as well as Tanium, Airwatch, Jamf, and many others, to simplify and streamline asset and agent management. Vulnerability Management Integrations Eclypsium integrates with leading vulnerability management solutions our common customers see vulnerabilities not just in applications and operating systems, but in firmware and hardware as well. Our integration with Kenna.VM is an example of this customer-driven integration. Patch and Orchestration Solutions Patch management systems have proven their ROI, but none handle the tricky and sensitive process of patching firmware. Eclypsium accelerates patching and update efforts, enabling staff to address weaknesses and save time. SIEM and Analytics Integrations Solutions like Splunk and QRadar are the incident response team’s go-to system for security analytics and insight. Eclypsium provides SIEM and analytics solutions with detailed event information at the firmware and hardware levels. Virtualization Integrations The Eclypsium platform automatically collects and analyzes firmware configuration in the VMWare ESX platform data, to identify, verify and fortify that firmware and report on vulnerabilities. Network Security Every device has firmware, and all firmware needs to be secured. This includes network devices like VPNs, CDNs, WAN, WAF and more. Eclypsium integrations with vendors like Cloudflare make this not only possible, but easy. Cloud Integrations The firmware supporting your cloud environments and workloads should also be secure and validated, even though it often seems out of reach. Eclypsium has proven integrations with major cloud providers to help you identify, verify and fortify the bare metal systems beneath your cloud workloads. . A Rich, Flexible REST API If you have a favored infosec or IT solution and it’s not shown on this page, don’t worry: Eclypsium adds new integrations constantly. Plus, our rich, full-featured API allows you to extend our capabilities for identifying, verifying and fortifying firmware to other solutions and partners. All Product Details > “Processor-level vulnerabilities have been a nightmare for us. Eclypsium will help our CIO sleep better at night.” —A Financial Services Company Products For Today’S Firmware Challenges Firmware Security is the cybersecurity discipline that goes where your vulnerability management, patch management and supply chain management tools are afraid to go: deep down to the firmware and hardware layers of your organization's devices and networks. Strengthen Ransomware Defenses Firmware is now a favored ingress point for ransomware that uses off-the-shelf attack kits like TrickBot and exploits against network-facing appliances. Assure Device Integrity Authentic, verified firmware is a critical root of trust for every device. Security teams need to assure firmware below the OS is not tampered with or modified. Secure Your Supply Chains As reported by the Atlantic Council, firmware attacks have become commonplace in the extended technology supply chain. Protect Remote Workers Just as the “perimeter” has disappeared from the data center, the “central office” is gone. We need to protect and secure the firmware our remote systems depend on. Cut Costs Managing and auditing firmware is critical in the face of modern attacks, but it’s also costly, error-prone, and anxiety-producing. Eclypsium automates firmware security. Secure High-Risk Travelers We’re becoming mobile again, and we’re carrying our secrets with us as we do. Drive-by attacks on travelling laptops are on the rise. Automate Firmware Patching A recent Gartner report states that “By 2022, 70% of organizations that do not have a firmware upgrade plan in place will be breached due to a firmware vulnerability.” Prevent Advanced Attacks New attacks like REvil, NetWalker, and Maze have focused on flaws inVPN firmware that traditional security tools can’t see or defend. Back to Top Subscribe to Below the Surface A firmware and hardware threat report from our research team. Privacy Policy ©2021 Eclypsium, Inc.