Zero Trust Security Assessments

A complete toolkit for risk lifecycle management

Many organizations conduct validated assessments once a year or biannually but have no ongoing strategy for detecting a breach within their supplier network. To manage the complete lifecycle of risk, you need tools and expertise to help orchestrate the process.

Fortress evaluates third-party providers based on a combination of their industry vertical and the services provided so that the targets and resultant risk metrics are contextualized and relevant. Fortress is differentiated in its ability to bring a custom, contextualized approach to risk management in order to achieve the right outcomes for our customers.

Fortress utilizes hundreds of different criteria across available reporting options.

As configuration options vary from implementation to implementation, we work with our subscribers to determine the best approach to address risk management requirements. Fortress uses threat intelligence to track identified vulnerabilities for third-party servers and from the National Vulnerability. Database to produce vulnerability metrics for observed technologies attributed to third-parties which are part of the overall score.

All cybersecurity findings are the result of inspection of third-party security posture and evaluation of their configurations. As such, Fortress maintains a higher confidence and more timely evaluation. Fortress also ingests many other third-party data sources, leveraging reputable news sources to identify operational risk criteria such as financial, social sentiment, safety, regulatory, legal, negative news, and more.

Additional reporting options such as the Data-driven Risk Assessment can also leverage other data sources such as IP reputation, Open Source Intelligence (OSINT), dark web monitoring, employee commentary across the internet, and more.

At less than 0.5%, our false positive rate is lower than the industry average.

All results are validated by our team of expert analysts to ensure high quality data, and our high level of coordination with third parties under monitoring ensures we receive extremely fast and accurate feedback for the tests we perform.