Tenable is to acquire cybersecurity start-up Cymptom for an undisclosed price. It plans to integrate Cymptom’s attack path management into Tenable’s existing tools. It will allow customers to identify their weaknesses before attackers exploit them.
Nico Popp, chief product officer, Tenable, said, “Risk prioritization has become a cornerstone of modern cybersecurity. By correlating software vulnerabilities and misconfigurations with network and access data, Cymptom can immediately identify exploitable attack and breach pathways.
“Following closing of the deal, these compelling analytics will be integrated into Tenable.ep, Tenable’s Exposure Platform, and augment the prioritization, benchmarking, trending and other capabilities which are part of Lumin and available via Tenable.ep.”
Who is Cymptom?
Founded in 2019, Cymptom focuses on vulnerability detection and how attackers exploit that. It maps any potential attack paths to the MITRE ATT&CK Framework. It scores and prioritises attack paths for mitigation. This allows defenders to remediate the most urgent immediately and schedule others for later.
This is not a one-off exercise. The Cymptom platform monitors attack paths continuously. If a new attack appears, it factors that into its scoring algorithm. It means that defenders are always dealing with the highest risk attack paths.
Importantly, the Cymptom platform is agentless. It can be deployed quickly across on-prem and cloud infrastructures.
Enterprise Times: What does this mean?
This is a good acquisition for Tenable as it widens its coverage of risk from attack. IT operations teams often have no way of knowing which patches are the most important and where they need to be applied. Cymptom can see where the greatest risk is and allocate time and resources accordingly.
For CISOs and Chief Risk Officers, this move also gives them an overview of an organisations risk using the Cymptom dashboard. It allows them to make organisation decisions quickly and effectively.
It will be interesting to see how quickly Tenable can integrate Cymptom into its products.