Cyber Radar is used for the collection, aggregation, categorization, and analysis of security data, assisting organizations in detecting intrusions, threats, and anomalies in behavior.

As cyber threats become increasingly sophisticated, real-time monitoring and security analysis are required for rapid threat detection and response. For this reason, our lightweight, low-computational-power agent provides the necessary monitoring and response capabilities, while our server supplies information on known threats and performs data analysis.

Cyber Radar's agents scan monitored systems for malicious software, rootkits, and suspicious anomalies. They can detect hidden files, covert processes, or unregistered network users, as well as unusual reactions to system usage.

In addition to the agent's capabilities, the server employs a signature-based approach for intrusion detection, utilizing its regular expression engine to analyze collected log data and search for indicators of compromise.

Cyber Radar's agents read operating system and application log files and securely forward them to a central administrator for analysis and storage based on predefined rules.

Cyber Radar's rules help you detect application or system errors, misconfigurations, attempted or successful malicious activities, policy violations, and a range of other security and operational issues.

Cyber Radar monitors the system and files, detecting changes in content, permissions, ownership, and file attributes that need to be monitored. Additionally, it inherently recognizes the users and applications used for creating or modifying files.

The file integrity monitoring capabilities can be used in conjunction with threat intelligence to detect threats or compromised hosts. Additionally, many compliance standards, such as PCI DSS, require file integrity monitoring as a security measure.

Cyber Radar's agents gather data from applications and send this information to the server, where it is correlated with constantly updated Common Vulnerabilities and Exposures (CVE) databases. This process allows them to identify, if present, any known vulnerable software.

Automated vulnerability assessment of your system's security helps you identify weaknesses in your critical assets and take corrective measures before attackers exploit them to sabotage your business or steal confidential data.

Cyber Radar monitors system and application settings and parameters to ensure compliance with security policies, standards, and/or hardening guidelines. The agents perform periodic scans to detect applications that are known to be vulnerable, outdated, or improperly configured.

Furthermore, the checks can be customized to align with your organization's preferences. Notifications include recommendations for better configuration and suggestions that correspond to the recommended rules.

Cyber Radar provides ready-to-use active responses for executing various countermeasures to address active threats, such as blocking access to a system from the source of the threat when certain criteria are met.

Moreover, Cyber Radar can be used for remote command or system control execution, detection of Indicators of Compromise (IOCs), and execution of other forensic or incident response tasks.

Cyber Radar provides essential security checks to align with industry standards and regulations. These features, combined with its scalability and support for multiple platforms, help organizations meet their requirements.

Cyber Radar is widely used by payment processing companies and financial institutions to meet the requirements of the Payment Card Industry Data Security Standard (PCI DSS). Its web-based workspace provides reports and control panels that can assist in compliance with other regulations such as GDPR, NIST 800-53, GPG13, TSC SOC2, and HIPAA.

Cyber Radar assists in monitoring the cloud infrastructure at the API level, utilizing integration modules that are capable of extracting security data from popular cloud providers such as Amazon AWS, Azure, or Google Cloud. Additionally, Cyber Radar provides rules for assessing the configuration of the cloud environment, easily identifying vulnerabilities.

Additionally, the lightweight and platform-agnostic agents of Cyber Radar are commonly used for monitoring cloud platforms.

Cyber Radar provides security capabilities for Docker, whether they are running as hosts or containers, by monitoring their behavior and detecting threats, vulnerabilities, and anomalies. The Cyber Radar agent has built-in integration with Docker, allowing users to monitor images, versions, network configurations, and active containers.

Cyber Radar collects and continuously analyzes detailed information about execution time. For example, it alerts about containers running in administrator mode, vulnerable applications, a shell being executed within a container, changes in versions or images, and other potential threats.