Enterprise

Damballa's enterprise solutions combine local and Internet-based appliances to identify targeted attack activity and isolate it from legitimate network traffic.

Damballa has three deployment options that work cooperatively to protect enterprise organizations. Clients receive focused, real-time information and analysis of bot compromises on their networks and broader BotArmy activity by subscribing to Damballa’s Internet-based Global Surveillance Network. This service delivers immediate alerts when new compromises occur on client networks. It requires no equipment on client premises and can be fully operational within hours.

Organizations concerned about compromised machines operating inside their network, unimpeded by AV or IDS/IPS, subscribe to Damballa’s Failsafe solution. This service utilizes Damballa appliances placed at key Internet access points and network intersections to identify internal activity from targeted attacks such as bots. Damballa notifies clients in real-time when a new compromise is detected.

Damballa’s Harbinger appliance is an advanced targeted threat intelligence system that provides real-time, on-site insight into suspicious systems, potential BotArmy compromises and resulting security events.  Harbinger provides more than just binary answers, such as “Compromised” or “Not Compromised.” Queries to Harbinger return a rich characterization of the host’s compromise level and recent activity, which is useful for both operations center personnel and end-user customers. This information allows analysts and systems to react faster and more accurately to a wider range of security risks, thus saving clients money and safeguarding corporate reputations.

When companies are concerned about compromised machines connecting to mission critical applications (e.g. extranets, VPNs, online transaction systems, ERP systems, etc.), they purchase Damballa’s Dreadnought solution. With this service, Damballa provides real-time information on malicious systems attempting privileged connections to critical internal systems. Damballa’s unique ability to identify targeted attacks operating across the Internet dramatically increases any organization’s ability to enhance the security of their most critical assets.