Shield Cyber Product Updates (May 2024)

Each month, we will provide a product update regarding the latest features and enhancements we have pushed out.  Our product team has been working hard to incorporate partner feedback to enhance existing functionality and deploy new features to provide more visibility into the networks that you are securing.  Hopefully, there are several core features that Shield is already assisting you with, including:

• External Vulnerability Scanning
• Internal Vulnerability Scanning (Network & Agent-Based)
• Active Directory & Identity Security Assessment
• Asset Identification, Ranking, & Classification

Here are some of the new items that we have released within the last few weeks:

Admin-Level Views

We have released a global view for our partners who manage multiple subscriptions within the Shield platform.  Users can now view all the subscriptions they manage within the Shield platform by navigating to the Overview page and quickly view high-level information on each subscription, such as connected scanners, connected agents, and volume of risks on each subscription.

Endpoint Configuration Assessment

The Shield platform can now assess each asset that supports an agent against its respective CIS benchmark(s). Each agent deployed on an asset will automatically assess the different policy checks outlined by the Center for Internet Security as passed or failed. The results can be viewed within the Internal Network module's Configurations tab and exported within the platform or via the Shield API.

Reporting

Reporting at the subscription level is now released and can be found in the new Reports module.  Users can generate and download several types of reports containing all of the findings within the attack surface, internal network, and identity security modules.  We will be iterating on customizations and functionality for report generation, so please let us know what you think! Specific suggestions related to reporting (or any items related to Shield) can be directed to feedback@shieldcyber.io.

Shield API

The initial Shield API has been released to production, allowing users to access subscription-specific asset, vulnerability, and configuration information on the external attack surface, internal network, and identity objects.  Please visit our Shield documentation site or Swagger site to learn more about using the API.

Enhanced Network Scan Configuration

We have increased the functionality of the network scans targeting external and internal network hosts. Users can now perform scans that target specific port lists and add more verbosity to how to identify if a host responds to the network traffic that is sent.

Streamlined Service Deployment

We are continuously improving the ease of deployment and have released a streamlined Deployments module where all your connected services can be managed and deployed within the platform.  Users can now deploy internal agents, network scanners, and identity collection services by navigating to the Deployments page and following the installation instructions.

We will continue to update you on relevant Shield product updates each month. For the latest product updates, please visit the What's New page on the Shield documentation site. Exciting updates are coming to the platform, and you will see more communication regarding the progress we have made, as well as relevant threats and vulnerabilities that may be impacting the networks you are working to secure.