The Human Managed web app hm.works has been getting fresh updates regularly with intel, decisions, and actions for use cases to control threats, scale opportunities, and manage risks. 

This week, we are excited to announce the release of a dashboard that reports on the discovery and detection of exposed weaknesses in your internet-facing assets (cloud, SaaS, PaaS, IaaS, on-prem resources).  

Read more about our attack surface management use case

external attack surface management (ASM) 🔍⬅️

Personalized intel, ranked decisions & prescriptive actions from continuous and contextualized discovery and detection of your external-facing digital assets. 

The external attack surface management dashboard answers the top 3 things you need to know about your security exposure:

What is my external attack vector on my internet-facing assets? 

What exposure should I prioritize based on severity and exploitability?

What is the best action to reduce my external attack surface? 

The challenges of securing your attack surface

External attack surface is the point or vector through which an attacker could enter your environment through assets open to the Internet, such as websites, servers, cloud services, software, and more. 

While external ASM is nothing new, it is increasingly challenging to execute  effectively at scale, because of the abundance and frequent changes in your organization's digital make up.  As your digital initiatives and supply chain of service providers and vendors grow, so do the number of entry points your attackers could exploit. 

 of externally exposed assets and their weaknesses, and 

 to consistently reduce the attack vector. 

Some examples of personalized intel that help with external ASM are: 

known and unknown / managed and unmanaged assets 

vulnerabilities affecting your internet-facing assets 

SSL certificate expiry, validity / vulnerability 

dormant / unused digital assets (e.g. domains, subdomains, IP addresses)

HM's external attack surface management use case helps you to get to effective decisions and actions quickly, by taking 

Let's explore each segment of the external ASM dashboard. 

Insights about your attack vector and exposures in numbers. 

Insights about your attack vector and exposures in visual charts and narratives.  

Curated analysis and recommendations to manage your external attack surface from HM. 

 gives you customizable to key indicators (in this case, domains and subdomain status distribution) 

 gives you prioritized direction to reduce exposures, based on hm.works's analysis.

 gives you the steps to execute the recommended decision

 Helps you to understand your company's current external attack surface across all discovered and monitored internet-facing assets, and take prioritized decisions and actions to reduce exposures -- based on data.

Interactive grid with organized data on your external attack surface. 

 An interactive grid breaks down discovered and monitored public-facing assets' exposure based on:

 (domain, SSL certificate, IP address, website, social account, technology )

(e.g. active / dormant subdomain, cloud IP address, third party library, network app)

 Understand and explore your current state of external exposure in detail, identify blockers, and plan for improvements to achieve desired posture goals. 

Drill down of all available details on an asset and its discovery path 

And that is hm.works 1.17! We will be releasing more features and updates regularly, so stay tuned.

To get the latest news from Human Managed, follow us on LinkedIn and check out our website and blog.

Want to discuss how we can help solve your cyber, digital, or risk operations through data?

Please contact us at hello@humanmanaged.com.

Human Managed app hm.works 1.17 released with dashboard on detected exposures & prioritized actions

Human Managed hm.works 1.17 released with external attack surface management

Human Managed app hm.works 1.16 released with dashboard on detected vulnerabilities & prioritized mitigation and remediation 

Since its first release on 13 March 2023, the Human Managed web app hm.works has been getting fresh updates regularly to report on intel, decisions, and actions generated from any data source from our customers.

This week, we are excited to announce the release of a dashboard that reports on the detection of vulnerabilities on managed assets (servers and infrastructure components hosted in corporate network / datacentres / cloud, or apps hosted in public app stores).  Read more about our 

vulnerability use case on our newly revamped website

Intelligence, recommended decisions and actions from continuous and integrated vulnerability assessment across your managed assets. 

The vulnerability dashboard answers the top 3 things you need to know about enterprise security:

What critical vulnerabilities exist in my environment? 

What vulnerabilities should I prioritize based on exploitability?

What is the best action to mitigate or remediate the vulnerability?

The challenges of vulnerability management

Vulnerability is a flaw or weakness in a system that can be exploited to compromise IT security. It can be caused by weakness in any IT administration, process, or design function, such as: 

insecure products & app from system and app vendors 

flaws in user administration / system access 

Effective vulnerability management (from discovery to remediation) requires a proactive, integrated approach that enables continuous vulnerability assessments, prioritized response based on business impact, and effective planning & tracking of remediation actions. 

Most organizations recognize the importance of vulnerability management, but struggle to: 

get accurate visibility of their network topology 

get understanding of security & availability implications of all network devices & computer systems (which can easily be >1000s) 

effectively plan network changes & maintain security controls 

contextualize vulnerabilities based on exploitability / exposure / impact

prioritize urgent and critical issues from data overload on a day to day basis 


HM's vulnerability management use case helps you to get to effective decisions and actions quickly, by taking 

 to vulnerability management -- regardless of the source of threat, or the environment in which a vulnerability is located. 

Let's explore each segment of the posture violation dashboard.

 gives you a high level summary of all open vulnerabilities detected in your assets, customizable to key indicators (in this case, detection severity)

 gives you a direction to prioritize to fix vulnerabilities, based on hm.works's analysis.

 Helps you to understand your company's current state of vulnerabilities across all managed assets, and take prioritized decisions and actions to improve the posture -- based on data.

Connect data sources such as vulnerability management, endpoint management, and network management to the Human Managed platform to perform contextualized analysis on vulnerability use cases.

 An interactive grid breaks down detected vulnerabilities based on:

 (common vulnerabilities and exposures identifier for publicly known information security vulnerabilities) 

(common vulnerability scoring system for quantifiable and standard measure of severity of vulnerabilities) 

 (quantifiable and standard measure of impact of vulnerabilities) 

(common weakness enumeration for community-developed list of software and hardware weakness types) 

 (e.g. network management platform, cloud security posture management, vulnerability scanner) 

CPE name, CPE version, app engine, app engine version 

 Understand and explore your current state of vulnerabilities in detail, identify blockers, and plan for improvements to achieve desired posture goals.

 Connect data sources such as vulnerability management, endpoint management, and network management to the Human Managed platform to perform contextualized analysis on vulnerability use cases.

And that is hm.works 1.16! We will be releasing more features and updates regularly, so stay tuned.

To get the latest news from Human Managed, follow us on LinkedIn and check out our website and blog. 

Human Managed hm.works 1.16 released with detection and resolution of vulnerabilities in your assets

Human Managed hm.works 1.16 released with continuous vulnerability management

Since its first release on 13 March 2023, the Human Managed web app hm.works has been getting fresh updates every week or two to report on intel generated from any data source from our customers.

Recently, we've had a series of releases on use cases to improve overall cyber posture of an organization: 

v.15 for ISO 27001:2022, SOC 2, NIST And CIS Benchmark compliance 

Today we are excited to release further updates on v1.15 for you to not only consume intel about posture violation and compliance, but to 

 a drill-down page from every cloud config violation, its check, the check's rationale and remediation steps

 allows you to understand the violation's impact across all monitored assets and mitigate prioritized violation issues on the spot 

(cloud resources under AWS accounts, Azure subscriptions, and GCP projects)

 to build, configure, and monitor cloud compliance use cases on the hm.works platform.

Here is the intel to decision to action flow: 

on top of every use case page to inform your next decision and action. 

explore the data grid to decide on your priorities 

 including other assets affected by the same violation and remediation steps to fix it. 

And that is hm.works 1.15.2! We will be releasing more features and updates regularly, so stay tuned.

To get the latest news from Human Managed, follow us on LinkedIn and check out our blog.

Human Managed hm.works 1.15.2 updated with remediation steps to fix CIS policy violations

Human Managed hm.works 1.15.2 updated with remediation for CIS policy violations

Since its first release on 13 March 2023, the Human Managed web app hm.works has been getting 

 to report on intel generated from any data source from our customers.

 with dashboards on cloud compliance to industry standards and frameworks including ISO 27001:2022, SOC 2, NIST And CIS Benchmark.

Today we are excited to release further updates on v1.15, giving you more ways to consume intel on your cloud security posture. 

 current overall scores of your cloud compliance against industry frameworks and standards such as SOC 2 and ISO 27001, as well as numbers of violations against checks. 

 allows you to easily visualize and understand your compliance posture. 

 to build, configure, and monitor cloud compliance use cases on the hm.works platform. 

Click on 'Get the I.De.A' to see the relevant compliance reports, and navigate other compliance frameworks by selecting them from the drop down menu: 

📝Note: Every element on our web app is updated continuously -- as your data changes, the visuals / reports change without requiring any effort from you. 

 current scores of your cloud configurations calculated against CIS benchmarks.   

config posture of your business environments in the cloud business environment, grouped by region.  0% means that the environments are observable, but there is no config detected. 

 config posture of all the resources grouped by cloud account.  

posture of the public cloud infrastructure provider (AWS, Azure, GCP, DigitalOcean)

 allows you to easily visualize and understand your config posture. 

 to build, configure, and monitor cloud posture use cases on the hm.works platform.

And that is hm.works 1.15.1! We will be releasing more features and updates regularly, so stay tuned.

Human Managed hm.works 1.15.1 updated with scorecards for compliance against ISO 27001:2022, SOC 2, NIST, and CIS benchmarks

Human Managed hm.works 1.15.1 updated with scorecards for cloud compliance and configs

Human Managed app hm.works 1.15 released with dashboard on cloud compliance


Since its first release on 13 March 2023, the Human Managed web app hm.works has been getting fresh updates every week to report on intel generated from any data source from our customers.

Our last release was on continuous reports on the detections of violations on public cloud resources (e.g. AWS, Azure, GCP).

This week, we are excited to take cloud security posture use case one step further -- compliance to industry standards and frameworks! 

A collection of charts, recommendations, and data grid that present your org's cloud compliance 

, so that you can mitigate misconfigurations, address your compliance risks in the resources you have deployed in the public cloud, and track your progress.

The cloud posture violation dashboard answers the top 3 things you need to know about the enterprise cloud compliance: 

What important checks have our public cloud resources failed on?

What mitigations should I configure and tune to protect my assets in line with my cyber posture and compliance goals?

Where are the biggest gaps between my preferred posture state and current posture state?

In our v1.15, all of your your cloud controls are checked against global standards and benchmarks: 

(the international gold standard for information security management

(widely recognized and recommended security framework for service providers)

(globally recognized and recommended cybersecurity framework) 

(security config recommendations from global experts)

Before we get those coveted green ticks for you, it's important to clarify some terms in the world of compliance: 

 - conforming to a rule, such as a specification, policy, standard, law or framework (eg. defining and performing all activities required under section A.8.28 Secure Coding of ISO27001)

- set of generally accepted criteria/rules used as a point of reference (eg. ISO 27000)

- a structure that organizes and categorizes the implementation of expected standards (eg. NIST CSF)

 prescriptive recommendations based on industry standards and best practices that can be used for measurement and comparison (eg. perform static application security testing)

criteria used to audit and/or measure the intent, implementation, operations and/or effectiveness (eg. issue tracking software to track weakness)

- a safeguard or countermeasure put in place to protect an asset (eg. secure coding)

📝 Bottom line = we are running continuous 

on your cloud resources and reporting whether each assessment 

Let's explore each segment of the cloud compliance dashboard.

 gives you a high level summary of your compliance state detected in your cloud resources, customizable to key indicators (in this case, pass vs. fail count)

 gives you a direction to prioritize to improve your cloud posture, based on hm.works' analysis.

 Helps you to understand your company's current state of cloud compliance, and take prioritized decisions and actions to improve the compliance -- based on data.

 to build, configure, and monitor violation use cases on the hm.works platform.

 An interactive grid breaks down your organization's cloud compliance based on: 

check severity (critical, high, medium, low)

asset type (app, data, device, network, org, user)

asset variety (e.g. EC2, IAM, CloudTrail, Storage)

control objective (lower attack surface / defense in depth) 

CIS family (identity & access management, networking, monitoring, storage, logging) 

 Understand and explore your current check result against security standards, frameworks, and benchmarks for each control,  identify blockers, and plan for improvements to achieve desired posture goals.

Human Managed hm.works 1.15 released with continuous assessment against security frameworks for cloud

Human Managed hm.works 1.15 released with ISO 27001:2022, SOC 2, NIST and CIS benchmark compliance for cloud

Human Managed app hm.works 1.14 released with dashboard on detected cloud config violations


Since its first release on 13 March 2023, the Human Managed web app hm.works has been getting fresh updates every single week to report on intel generated from any data source from our customers.

 to creating intel on your digital business' assets, postures & behavior, and establishing 🔗

🔗 between them to improve your decisions and actions for many use cases.

This week, we are excited to announce the release of a dashboard that reports on the detections of violations on public cloud resources (e.g. AWS, Azure, GCP).

A collection of charts, recommendations, and data grid that present your org's cloud security posture 

, so that you can mitigate misconfigurations, address your compliance risks in the resources you have deployed in the public cloud, and track your progress. 

The cloud posture violation dashboard answers the top 3 things you need to know about the enterprise cloud security: 

Why you should care about cloud security 

If any of your business apps and data are in the public cloud, you should care about your company's cloud posture.  It's your responsibility to protect your digital assets, whether they're up in the clouds or in your datacentre. 

Major cloud providers have made their respective versions of the responsibility model publicly available (e.g. 

), but AWS simplified this by saying that:

The customer is responsible for security 

 the cloud

The provider is responsible for security 

What this means is that regardless of the service consumed (i.e. either SaaS, PaaS, or Iaas) from the cloud provider, these two facts remain:

(1) the customer is always responsible for its

(2) the cloud provider is responsible for the

So, your digital assets on your public cloud = your responsibility to configure their security controls against your target posture state (taking into account your specific business needs, industry standards, benchmarks). 

gives you a high level summary of all open violations detected in your cloud resources, customizable to key indicators (in this case, check severity) 

gives you a direction to prioritize to improve your cloud posture, based on hm.works's analysis. 

gives you the steps to execute the recommended decision 

 Helps you to understand your company's current state of cloud posture, and take prioritized decisions and actions to improve the posture -- based on data. 

 An interactive grid breaks down your organization's posture violations based on:

asset criticality (critical, high, medium, low)

 Understand and explore your current state of cloud posture and violations in detail, identify blockers, and plan for improvements to achieve desired posture goals.

assets with Critical / High severity posture violation

To quickly see what violations exist per 

And that is hm.works 1.13! We will be releasing more features and updates regularly, so stay tuned.

Human Managed hm.works 1.14 released with cloud config violation detections

Human Managed hm.works 1.14 released with cloud posture violation

Human Managed app hm.works 1.13 released with dashboard on detected network config and rule violations

This week, we are excited to announce the release of a dashboard that reports on the detections of violations on network assets (such as firewalls). 

A collection of reports, charts and data grid that present your org's network posture from use cases such as: 

The posture violation dashboard answers the top 3 things you need to know about your enterprise network posture: 

What important checks and rules have our network devices failed on?

What checks and rules should I configure and tune to protect my assets in line with my cyber posture and compliance goals? 

Where are the biggest gaps between my preferred posture state and current posture state? 

Before we dive in to the details, some key concepts when it comes to network posture: 

read more about our approach to business posture

a standard that sets the parameters for checks and rules

assignment of policies, checks, and rules 

(e.g. a critical firewall's configs of checks and rules may be stricter than a low-criticality firewall's configs, even though they are covered by the same organization network security policy) 

 assessment of whether checks and rules are configured according to desired setting 

state of failed check / rule / configuration 

All these posture states can be monitored as key indicators from your data and adjusted to improve your organizational network posture.

Let's explore each segment of the posture violation dashboard. 

The line chart reports the number of times subscribed  violation use cases have been detected by hm.works platform over time. 

The table lists all subscribed violation use cases, and the posture indicators that trigger the detection for each use case, and the number of times the indicators are detected over a time period. 

📝Note: hm.mworks platform uses automated detections consisting of pre-defined conditions, correlation rules and/or machine learning algorithms to identify suspicious or malicious activities and create Detections that need to be actioned.

Categories

Recent

Human Managed hm.works 1.17 released with external attack surface management

Human Managed hm.works 1.16 released with continuous vulnerability management

Human Managed hm.works 1.15.2 updated with remediation for CIS policy violations

Human Managed hm.works 1.15.1 updated with scorecards for cloud compliance and configs

Human Managed hm.works 1.15 released with ISO 27001:2022, SOC 2, NIST and CIS benchmark compliance for cloud

Human Managed hm.works 1.14 released with cloud posture violation

Human Managed hm.works 1.13 released with network posture violation

Case Study: driving service performance with intelligence from data

Human Managed hm.works 1.12.1 updated with geochart