Exabeam has announced that its New-Scale Security Operations Platform is the first SecOps platform compatible with the Open-API Standard (OAS). The company claims that “By prioritizing openness and flexibility, Exabeam is rewriting the rules of SOC automation, empowering security teams, and setting a new benchmark in the industry.”
One of the goals of this latest release is to make it easier to create automations and playbooks. With SOC teams becoming increasingly reliant on both to handle the level of alerts they face, this will be welcome. It puts the focus back on responding to threats rather than managing automation.
Exabeam claims that there are 1,000s of third-party integrations with the OAS. By incorporating OAS into The New-Scale Platform, it says customers will have a seamless integration with those products. That ease of integration will make life simpler for developers and allow them to create and launch automations and playbooks in just minutes or seconds.
Steve Wilson, Chief Product Officer at Exabeam, said, “For too long, security teams have been forced to work within walled gardens, making do with fragmented, rigid systems that waste valuable time. At Exabeam, we’re shattering that model.
“Today, we deliver a unified, open ecosystem that allows users to take control, integrate the best tools, and customize their security operations without the roadblocks of traditional platforms. The era of truly open security operations is here— and Exabeam is at the forefront, leading the charge toward a future where security is as dynamic as the threats we face.”
What does the New-Scale Platform deliver?
The headline features available in the New-Scale Platform (NSP) are impressive. It claims:
- 198 fact-based rules
- 504 behavioural models
- 69 context rules
- 1,000s of third-party integrations with OAS
Those different rules and models, along with automation, are used across the whole of the New-Scale Analytics Platform. Importantly, the OAS integrations happen on the right side of the platform and connect it to third-party applications.
This latest release brings enhancements to a number of the individual elements inside the NSP. Using machine learning and AI, the company says that New-Scale Analytics (NSA) will learn over time and apply business factors to risk scoring. It will be in continuous learning mode that ensures it updates for all threats as they are discovered.
This release of NSA also creates a unified threat detection and response environment using the Threat Center as a workbench. It uses the Exabeam Copilot to deliver threat summaries and to automate investigation timelines.
One of the key elements of NSA is a new Partner-Centric Open Platform. It allows partners to integrate any tools into the platform. One example cited in the release is the recent integration with Wiz. The company claims it “brings comprehensive cloud security insights to strengthen threat detection, investigation, and response (TDIR).”
Other announcements in this update
This latest update also sees new capabilities and features for two other products from Exabeam, LogRhythm and NetMon.
LogRhythm has two updates. The first is called enhanced warm tier search. This will speed up searches across warm data. It will make it easier for analysts to search historical data on the LogRhythm SIEM Platform. It is also aimed at speeding up investigations on that platform.
The second update delivers expanded visibility with Cloudflare Beat. It is a new integration with AWS and will improve the visibility of log data stored in AWS S3.
NetMon is now available across the entire Exabeam product portfolio. It is an add-on to both NSP and LogRhythm, which will give more granular insights into network traffic. Additionally, it is now possible to monitor activity with insights from over 3,500 applications. Security teams can now analyse traffic and set new data collection points around how the application and used.
There are several new rules and customisable deep packet analytics (DPA) scripts in the NetMon update. These allow security analysts to automate threat detection on network traffic.
Enterprise Times: What does this mean?
This is Exabeam’s first product update for 2025 and it contains a lot of interesting updates and enhancements. Partners and Customers will welcome the increased automation inside the New-Scale Security Operations Platform. It will enable them to reduce the time spent by analysts trying to assess the amount of log data they are faced with.
The updates to LogRhythm and NetMon will also be welcomed. The big gain here is the tighter integration with NetMon to provide much-needed visibility of network traffic to security teams.
However, the most important item in this announcement is the compatibility with the Open API Standard (OAS). It will make it much easier for security teams to integrate with other tools allowing them to ingest and share data.
