Eagle ScanV
A confirmed vulnerability arrives as a record with an owner and a due date set by its severity, and the hosts it found arrive in the CMDB. A risk accepted here is accepted in the scanner.
Eagle ScanVComplete GRC, ISMS, Security & IT Operations solution
The information security management system, the Service Desk and the security posture of the organisation, in one product and one database. It is the hub of the suite: what the other products find, this one turns into work with an owner.
What it does
Govern it, run it, prove it
Built on ISO/IEC 27001:2022 for the people who answer for security: the CISO, the virtual CISO with several organisations to look after, and the IT and security teams who do the work.
- Risk on your own terms. A threat catalogue of your own, every risk assessed against a threat from it, inherent and residual scores on your own matrix, a treatment, and a signed acceptance.
- A CMDB that fills itself. Configuration items are discovered from Microsoft Defender, Entra ID, Intune, Active Directory, VMware vCenter, Proxmox and Eagle ScanV, and an impact view follows the dependencies both ways.
- Supplier assurance. A questionnaire goes to the supplier as a link that needs no account. The answers are scored, reviewed and signed off, and the next review is dated.
- Controls and frameworks. The 93 controls of Annex A are the pivot, mapped to NIS2, NIST CSF 2.0, NIST SP 800-53 and 800-171 and CIS Controls v8, so one piece of evidence answers several. DORA, GDPR, ISO 22301, ISO/IEC 27701, TISAX and SOC 2 come as framework packs, and your own is imported from a file.
- Evidence that collects itself. Read-only checks against Entra ID and Active Directory arrive as dated evidence, already linked to the controls they answer.
- Policies people have read. Document numbers, versions, an approval with a name and a date, and the acknowledgement of the staff the policy applies to.
- NIS2 incident reporting. A significant incident carries the early warning at 24 hours, the notification at 72 hours and the final report a month later, as dated steps with reminders and the text of each report prepared.
- Incidents, corrective actions and audits. From detection to closure, with internal, certification and supplier audits, and a management review that records who attended, what went in and what was decided.
- Service Desk. Tickets by mail, SLA targets, change requests and new user requests with a signed approval, and joiner, mover and leaver plans that an HR system can start through the API.
- Continuity and data protection. Recovery objectives and tests for business continuity and disaster recovery, and a record of processing with the state of every impact assessment.
- The CDC Score. One figure from 0 to 100 across nine weighted domains, recorded every day and explained down to the records behind each point, on a dashboard you arrange yourself.
- Board reports and knowledge. Reports export to PowerPoint as shapes you can edit. WikiDOX keeps versioned documentation and is the knowledge base of the Service Desk.
In the suite
The hub, and what reports to it
Each product looks after its own integration with the Cyber Defence Center. The hub handles what arrives: vulnerabilities, the CMDB, the Service Desk and the figures.
Eagle SOC
Detection and response for one organisation or many. What the SOC works as an incident, the hub governs as risk, evidence and reporting.
Eagle SOCEagle MonV
A problem on a monitored system becomes a Service Desk ticket, and the state of the system follows its record in the CMDB.
Eagle MonVEagle DNS Secure
Detections become incidents, the address plan fills the CMDB, and the figures reach the dashboard.
Eagle DNS Secure
How it is secured
Nothing for an outsider
A product that holds an organisation's risks and incidents is a target in its own right, and is built as one.
- A sign-in page, and nothing else. Until somebody has signed in, the product serves a sign-in page and its images, and not one word about what is behind it.
- The page you are entitled to. Each person is sent only the parts of the application their rights cover. What you may not use never reaches your browser.
- Authenticator codes. Every administrator signs in with a second factor, and single sign-on through Entra ID and Active Directory is there for the organisation that wants it.
- App Shield. A web application firewall inside the application scores every request for injection, cross-site scripting, path traversal and request forgery, and can refuse the request, end the session and block the address.
- Uploads that are what they say. A file must be a real document or image by its content, macro-enabled files are refused, and what is accepted is scanned on the server by ClamAV.
- Nowhere to be sent. Outbound connections are HTTPS only, checked again at the moment of connecting, and never to loopback, link-local or cloud metadata addresses.
- Encrypted at rest. The database is encrypted, and files and secrets are sealed with AES-256-GCM.
- Organisations kept apart. Every request is filtered on the server to the organisation it belongs to.
- A log that cannot be quietly edited. The Security Log is numbered in sequence and chained by hash, and ships as syslog or CEF, or directly to Microsoft Sentinel.
- Administration on its own plane. The administration of the installation answers on a host of its own, from the management network, and to nobody else.
Integrations
Works with what you already run
Microsoft Secure Score Defender for Cloud Microsoft Defender Entra ID Intune Microsoft Sentinel Active Directory VMware vCenter Proxmox CrowdStrike Qualys Tenable Jira ServiceNow Webhooks
Good to know
Before you ask
On your premises
Runs on your own Windows Server with IIS and MariaDB, installed by a service tool from a package whose checksum is verified first.
Eight languages
English, Swedish, Danish, Norwegian, German, French, Spanish and Italian.
A licence that is a file
Signed, checked offline, and granted for each module. Nothing calls home.
Eagle SecOps Suite
One part of one system
Cyber Defence Center is part of the Eagle SecOps Suite: governance, detection, monitoring, vulnerability scanning and secure DNS, built by one team to work as one.
See the Cyber Defence Center running
An hour with the people who built it, on a real system, with your questions. No slideware.