Proofpoint Inc., the Sunnyvale, Calif.-based cybersecurity and compliance company has entered into a definitive agreement to acquire Illusive, the Identity Threat Detection and Response (ITDR) company. The acquisition is expected to close by January 2023, subject to customary closing conditions. The cost of the acquisition was not disclosed.
With the acquisition, Proofpoint says it will enhance its threat and information protection platforms by adding proactive identity risk discovery and remediation as well as post-breach defense capability, providing a unified solution that extends protection across the entire attack chain for critical threats like ransomware and data breaches.
The global increase in cyberattacks has been enabled by attackers shifting their tactics and focus to identity-based attacks, with 84% of organizations falling victim to an identity-related breach in the past year. These attacks traverse through identities – from privilege escalation to lateral movement and abuse of Active Directory and cloud environments, such as Microsoft 365. With Illusive, Proofpoint’s visibility into the identities that are attacked and vulnerable across an organization will equip enterprises with insights into their privileged access attack surface, the companies say.
“It’s currently far too easy for an attacker to turn one compromised identity into an organization-wide ransomware incident or data breach,” said Ryan Kalember, executive vice president, cybersecurity strategy, Proofpoint, in a statement. “The acquisition of Illusive reinforces Proofpoint’s commitment to innovation and growth, bringing market-defining technology to make threat actors’ jobs as difficult as possible.”
Illusive’s solutions are used by multinational corporations, protecting some of the world’s best-known brands by taking away what attackers need to complete their crime: privileged account access.
“Illusive is solving a problem that others cannot by focusing on protecting identity security vulnerabilities and stopping the menace of ransomware, which has galvanized worldwide demand for our solution,” said Ofer Israeli, founder and CEO, Illusive. “We are thrilled to join Proofpoint and add our unique approach to ITDR to its people-centric security vision, helping organizations remediate privileged identity risks and understand potential ramifications of compromise, such as access to critical data and intellectual property.”
Together, Proofpoint and Illusive will deliver identity security as part of Proofpoint’s threat protection platform including:
- Automatic discovery and remediation of identity vulnerabilities before attackers exploit them with Illusive Spotlight: with its agentless approach, Illusive Spotlight delivers visibility into vulnerable identities by scanning directory structures (e.g., Active Directory), privileged access management (PAM) solutions, endpoints, servers and services, revealing the gaps between the intention of an organization’s identity security policies and the reality of their environment.
- Detection and response to identity threats to stop privilege escalation and lateral movement to critical assets with Illusive Shadow: unlike other deception technologies that deploy agents or honeypots which can tip off or be exploited by the attacker, Illusive Shadow’s agentless architecture prevents attacker detection and is undefeated in over 150 red team exercises. It allows organizations to deterministically accelerate threat detection by identifying threats based on attacker interaction with deceptions, not probabilistic controls based on signatures or behaviors.
Leave a Reply