WatchGuard Network Detection and Response

CyGlass, offered by WatchGuard, is a cloud-native network threat detection and response solution designed to provide continuous visibility, risk assessment, and real-time threat detection across hybrid networks. According to the vendor, CyGlass leverages AI and machine learning to identify vulnerabilities, policy failures, system risks, and anomalous events in real-time. It caters to organizations of all sizes, including Managed Service Providers (MSPs), Managed Detection and Response (MDR) providers, IT professionals, cybersecurity teams, legal firms, education institutions, and state, local, and city governments.

Key Features

Continuous Visibility and Threat Detection: CyGlass offers continuous visibility to cloud, directory, and network systems, including IoT devices. It utilizes AI to detect vulnerabilities, policy failures, system risks, and anomalous events in real-time.

Comprehensive Threat Surface Coverage: CyGlass covers network, cloud, VPN, IoT, and Identity threat surfaces. It seamlessly integrates with EDR, SIEM, and SOAR solutions to provide comprehensive threat detection and response capabilities.

Automated Compliance and Reporting: CyGlass includes a complete SIEM-like continuous compliance engine with pre-built ISO/NIST controls. It offers user-friendly control policy creation and automated reporting for various compliance frameworks.

Cloud-Native Solution, No Hardware: CyGlass operates as a cloud-native solution, eliminating the need for onsite hardware. It is delivered as a Software-as-a-Service (SaaS) platform, enabling easy integration with existing infrastructure.

Ransomware Defense: CyGlass employs AI-driven ransomware defense, continuously monitoring for indicators of ransomware attacks and providing real-time alerts. It detects and surfaces anomalous events to identify potential ransomware threats.

SIEM Alternative: CyGlass provides an alternative to traditional Security Information and Event Management (SIEM) tools. It offers extensive threat surface coverage without the complexity and high costs associated with SIEM solutions.

Turbocharge Your Firewall with AI: By integrating with firewalls, CyGlass enhances their capabilities with AI-driven risk and threat detection. It analyzes network traffic, user behavior, and other data to identify and surface potential threats.

Hybrid Cloud Defense: CyGlass offers comprehensive risk and threat coverage for hybrid cloud environments. It provides visibility into network, VPN, Microsoft 365 (M365), Active Directory (AD), Azure, and AWS environments, ensuring superior visibility and defense against threats.

Smart Alerts: CyGlass delivers intelligent alerts that prioritize threats and risks based on severity and impact. It utilizes AI and correlation to provide actionable insights to security teams.

Integration with Endpoint Detection and Response (EDR) Solutions: CyGlass seamlessly integrates with leading Endpoint Detection and Response (EDR) solutions such as Sentinel One and Microsoft Defender. This integration enhances threat detection and response capabilities by combining network-level visibility with endpoint security.