Anomali, NSS Labs Partner to Deliver Targeted Threat Information Through Continuous Security Validation (CDSA)

Anomali, provider of market-leading threat intelligence platforms and NSS Labs, Inc., the global leader in operationalizing cybersecurity, today announced a strategic partnership that provides enterprise customers with a unified view of unmitigated threats and empirical data regarding the effectiveness of security controls to drive informed action and reduce risk in their environments. The integration of Anomali ThreatStream and NSS Labs’ CAWS Continuous Security Validation Platform arms enterprises with highly targeted and relevant threat information validated by NSS Labs’ CAWS Platform, which enables them to act with surgical precision to pinpoint and address threats before incidents occur.

The CAWS Platform leverages NSS Labs’ unmatched expertise in security product testing and threat discovery to evaluate the effectiveness of security controls and provide enterprises with relevant information to mitigate risks and prioritize actions. The release of CAWS 3.0, announced a few weeks ago, further advances NSS Labs’ vision to deliver continuous security validation and empower enterprises to make informed decisions to improve their security and risk posture. Anomali ThreatStream combines threat data from feeds and other sources with data from inside the network to surface relevant threats to an organization. By mapping Indicators of Compromise (IOCs) with a strategic threat model, analysts using the ThreatStream platform are able to quickly identify, investigate, and react to security threats.

According to a recent Ponemon Report commissioned by Anomali, 70 percent of organizations are swamped by cyberthreat data and on average, only 31 percent of these key stakeholders receive information that can be used to inform them about critical security and risk issues they face. These challenges are further intensified by the growing need to measure and improve security effectiveness. According to NSS Labs’ 2017 Survey of North American Enterprise CISOs, despite extensive investments, 52% of enterprises have little to no fact-based data about how their security controls are performing, and they lack the empirical evidence required to inform decision making and facilitate risk management.

To help organizations navigiate information overload and to facilitate high-fidelity security results, Anomali and NSS Labs have joined forces to surface targeted, unmitigated threats that are relevant to individual organizations. NSS Labs’ CAWS Platform captures threats in real time against virtual replicas of customers’ environments, including operating systems and applications, and it precisely validates which of these threats are not mitigated by existing security controls. Anomali ThreatStream then leverages this unmitigated threat information by correlating it with other threat intelligence sources to surface pertinent threats specific to the enterprise environment. The result is actionable and relevant threat information that matters the most to enterprises for mitigating risk.

“Security professionals are facing increased pressure to provide empirical data to executive management that demonstrates the effectiveness of their security defenses,” said Gautam M. Aggarwal, Chief Marketing Officer and Head of Products at NSS Labs. “The combined strengths of NSS Labs’ CAWS Platform and Anomali ThreatStream deliver relevant, targeted information based upon the results of NSS Labs’ continuous security validation capabilities to help our mutual customers further reduce risk and gain confidence that their security controls are providing optimal protection.”

“Threat intelligence is becoming a highly sought after capability that is giving organizations the ability to identify and stop attacks before they inflict major damage. Organizations that don’t have the ability to make sense of the flood of data can find themselves often chasing false positives and missing the most menacing traffic,” said Dan Barahona, Chief Marketing Officer at Anomali.  “The Anomali mission is to help organizations find and respond to cyber threats. While our suite of products accomplishes this goal for customers, integrating with products that provide further, complementary capabilities allows us and NSS Labs to extend our solutions to a wider range of users.”

To learn more about the partnership and to access the integrated solution, visit