JupiterOne

We (InfoSec team) realize a lot of things about how our business runs that sometimes people don’t tell us, or that we wouldn’t have put together intuitively on our own. We’ve been very satisfied with JupiterOne and the service that comes with it

JupiterOne has probably been the best tool I’ve touched. It’s given us a lot of visibility into our environment. From an information security analyst perspective, it’s become the go to for me and Adam whenever we’re responding to incidents and day to day operations

Although it’s fundamental to knowing what you have and where it lives — it’s a difficult problem to solve. Previously, we weren’t able to solve this problem with AWS native and other tools

My goal as CISO is to be a business enabler. This is particularly true at a tech company, but I believe anywhere you work you should be thinking about how to be a partner to the business

Initially, JupiterOne was just our asset management platform. But, there’s so much more to it. Any time you have data in the platform, JupiterOne is constantly and automatically connecting it to other data. That’s where the power comes in. We’ve been able to offload a lot of our work because of it

When we track cyber assets, this includes assets across the entire software development pipeline and every infrastructure partner. JupiterOne helps us keep track of every asset in the cloud and alerts us when there are changes so we can assess those changes

One of the things that really made me throw my support behind the decision to work with JupiterOne is the connection my team has to the JupiterOne team. JupiterOne is willing to go with us where we’re trying to go. That’s not just technical expertise, that’s culture

Manual threat modeling, regardless of the analyst’s diligence, is prone to errors...there is little appetite for errors when it comes to this sort of analysis

A tool like JupiterOne is critical to completing a robust threat analysis

We believe Vulnerability Management is more about Asset Management, Attack Surface Management, and Risk Management than pure patching. Our team’s goal is to understand our current security posture as close to real-time as possible, and to properly prioritize action for deviations from ideal state

My approach for vulnerability and asset management is fairly straightforward — regardless of the tech I use, these are the questions I care about and I want to know the answers at this cadence. When I was shown JupiterOne, that’s exactly what I got. JupiterOne’s Questions is the centerpiece to everything that we do and always gives us actionability

I couldn’t believe all of the integrations and data pieces that were incorporated into JupiterOne that I previously had to find in a makeshift way

What J1 has done is create something that is SaaS-oriented and easy to consume and use

This tool empowers us to be more proactive. I can report current risk and PCI compliance metrics month over month and maintain that level of PCI compliance. That’s a return on investment all on its own

One of the big things that got us excited about JupiterOne was the Graph view – seeing how everything is connected. That, plus knowing that we had the out-of-the-box Insights Dashboards for Incident Response helped me sleep better