US-based cyber security company Resecurity delivers a unified platform for endpoint protection, risk management, and threat intelligence for large enterprises and government agencies worldwide. It enables enterprises, national security and law enforcement agencies to combat cyber threats regardless of how sophisticated they are.
A big part of Resecurity’s work is R&D. Resecurity will be part of the World Defense Show (WDS) 2022 in Riyadh, Saudi Arabia. Ahead of the mega event, Arabian Defence magazine spoke to Resecurity’s CEO Gene Yoo, who explained about the company’s operations, products, achievements, besides the company’s plans in the Middle East.
Resecurity has been delivering a unified platform for endpoint protection, risk management, and threat intelligence for large enterprises and government agencies worldwide. Could you give an overview of your operations and major achievements?
Founded in 2016, Resecurity is a US-based cyber intelligence company with the mission of enabling enterprises, national security and law enforcement agencies to combat cyber threats regardless of how sophisticated they are. Our team is built of cybersecurity and data sciences experts who have worked in the trenches of threat detection and incident response for large enterprises that are now applying their knowledge to continuously improve Resecurity’s services and platforms.
In the past year alone, Resecurity was recognised in Inc. Magazine’s 5000 as one of the fastest-growing private companies in the U.S., awarded for Outstanding Endpoint Protection Solutions at the Intersec 2022 Awards and announced their planned AI-intelligence R&D centre in Riyadh, Saudi Arabia. Resecurity is an official member of AFCEA, NDIA, SIA and Infragard as well as an academic partner of several US-based universities including the University of Las Vegas and Kennesaw State University where we deliver trainings and internships for students and young specialists interested in cyber threat intelligence (CTI), Dark Web Monitoring and vulnerability research areas.
Artificial intelligence will play a critical role in securing the expanding digital world. Could you talk about Resecurity investing in R&D and AI-powered innovation to give enterprises the upper hand among emerging cyber threats?
Threat actors are increasingly tapping into AI to scale their operations and attacks. For organisations to have a chance, it will be critical to adapt cyber threat intelligence tools that leverage AI. Similar to how AI is used in other industries for fraud detection, AI will be critical in future cyber threat detection and response.
Resecurity is leveraging AI and data science to understand patterns, stay ahead of trends and help organisations quickly identify possible threats systems that need to cope with thousands of events taking place every second, which is where cybercriminals will try to strike. Resecurity’s AI-driven solutions draw on data compromising five billion threat artifacts, nine million profiles of threat actors and 700 million fully indexed and translated Dark Web data entries. Using advanced machine learning and data science we enable cybersecurity leaders to make faster, smarter and weighted decisions and increase their visibility into cyber threats.
What makes your product ‘Risk’ an ideal solution in digital risk monitoring? Could you talk about its accuracy, scalability and effectiveness?
Modern enterprises need cyber threat intelligence (CTI) and risk intelligence to stay ahead of the emerging security challenges. National regulators, including Central Bank, are requiring enterprises to implement proper tools to collect CTI including but not limited to the most recent indicators of compromise (IOCs), relevant Dark Web activity, malicious campaigns conducted by foreign threat actors and groups.
Today, cybersecurity professionals are expected to manage hundreds, often thousands, of incoming data streams and threats with limited time and resources. With growing burnout rates and the global cyber talent shortage, having a solution that can bring all of these inputs into one dashboard with contextualised data is critical for organisations to minimise risk and heighten security across the ecosystem.
Resecurity’s Risk solution collects billions of data points from sources ranging from the Dark Web to internal backdoors, quantifies their risk and creates an easy to interpret dashboard to provide the most accurate and up-to-date reports at the security team’s fingertips. As a SaaS platform, the tool can scale across the globe and organisation, similar to the evolving threat landscape organisations face today.
Resecurity delivers maximum coverage of threat artifacts and provides effective tools to monitor cyber risks across the enterprise ecosystem including your brand, endpoints, employees, networks, clouds, services and supply chain.
How strong are the company’s export operations? Could you shed some light onto your client base?
While Resecurity is based in the U.S. with headquarters in Los Angeles, California, our clients stretch across the globe and range from small organisations to large enterprises and governments. As a SaaS-based platform, Resecurity can scale and adapt no matter the location or the needs of our clients. We take a tailored approach for every client we work with, understanding their unique needs and threats to provide them the solutions and protection they need. To help meet this global scale, we have expanded our partners and regional staff to meet the localised needs and challenges of each region.
Our client base includes the leading energy company worldwide, the leading financial institution in the U.S., the leading technology company in the U.S., multiple Fortune 500 corporations, with international presence including APAC, MENA, North America and European Union, and 12 law enforcement and defence organisations. All products and services of Resecurity have successfully passed proper export control procedures and are available to cybersecurity professionals based in not embargoed (sanctioned) and ITAR proscribed countries.
What are the features of the intelligence platform ‘Context’ used by enterprises and governments to accelerate threat analysis?
The Context is a Cyber Threat Intelligence Platform (TIP) which draws from an unparalleled number of data sources to accelerate analysis, prevention, and investigation workflows. Features like lightning-fast search, AI-driven intelligence allow the tool to automate the identification, assessment and triage of incoming cyber threats while staying ahead of cybercriminals using AI-driven tactics to attack companies at scale.
Using Context, enterprises and governments can quickly identify and analyse emerging threats from across the world in a single dashboard, allowing them to accelerate both their analysis and response. Law enforcement and defence organisations use our product for threat landscape monitoring, in-depth investigations and intelligence collection based on over 34,000 integrated data points.
Our engineers built the concept of “all-source” intelligence not limited just to cyber, allowing operators from various fields to use it with maximum efficiency and to search for targets ranging from particular persona, organisation, geofenced area, network-related information (IP, domain), cryptocurrency wallets or monikers in Dark Web.
Could you talk about your services in digital forensic and managed threat detection?
For many organisations dealing with limited security staff and resources, bringing in an outside team of experts to perform digital forensics and threat detection to uncover and investigate threats goes a long way. Resecurity’s digital forensics service dives deep into an organisation’s digital ecosystem to understand potential and ongoing threats while providing actionable reports and strategic feedback to help businesses improve their security posture.
We’ve seen this service being beneficial for organisations looking to test for readiness as well as organisations who have experienced a cyber incident looking to rebuild their security strategy. Resecurity’s managed threat detection is an ongoing partnership with our clients to serve as their dedicated team that hunts and manages incoming cyber threats across an organisation’s digital security environment.
Our team leverages both advanced EDR technologies and research and mitigation skills. Our specialists hold industry-leading certifications including but not limited to CISSP, CISA, GIAG Certified Incident Handler (GCIH), CEH and OSCP.
The company advances threat detection and response in the Middle East via local strategic partnerships with local MSSPs. Could you talk more about this?
It is no secret the digital economy is booming throughout the Middle East. With this growth, cyber threats have followed, which is where we see an exciting opportunity to help organisations throughout the Middle East secure their digital ecosystems and keep up with emerging cyber threats. To do this, Resecurity has invested in local staff in the Middle East and partnered with ML Consulting along with other valuable MSSPs and IT providers to expand its advanced cyber threat intelligence and solutions to local organisations.
Additionally, Resecurity is investing in a cyber intelligence R&D centre in Riyadh focused on data science, artificial intelligence (AI) and cognitive security technologies to protect the region against emerging threats to protect smart cities and critical infrastructure. To attract local cybersecurity talent for R&D Centre, Resecurity has secured a number of internships with students and graduates from King Saud University, King AbdulAziz University and King Abdullah University of Science and Technology.
These educational alliances will further facilitate knowledge transfer and will adapt perspective technologies to the needs of key enterprises in Saudi Arabia.
How do you look at World Defense Show 2022 as a platform to extend the company’s reach in the Middle East? What are the highlights of your participation at the expo?
The World Defense Show 2022 brings together cybersecurity and defence technology leaders from across the world, serving as the perfect event to showcase our latest solutions and research on cyber threat intelligence, detection and response.
Our MEA team and senior leadership team from the U.S. will be present to connect with local organisations interested in experiencing our solutions hands-on. We will also be sharing more on our partnerships and R&D centre plans. We look forward to connecting with forward-thinking organisations at this year’s event as Resecurity continues to grow its presence in the Middle East. Resecurity booth is located in P3 (North America Pavilion).