Technology Security Solution Partnerships

Partnering with the Best-in-Class

HALOCK Technology Partners

HALOCK partners with a select few security solutions to help our customer address gaps or enhance capabilities. HALOCK vets each vendor by extensively testing and evaluating the functionality, effectiveness, and security of the solution before adding to our partner roster.

Reasonable Risk
REASONABLE RISK

GRC SaaS Platform for Risk Management

This tool helps manage an organization’s cybersecurity risk. The platform enables communication of program progress and budget requirements with executive management so that they can make better cybersecurity risk decisions.

EMAIL SECURITY

EMAIL SECURITY

This is a technology that inspect incoming and outgoing email from your email provider to identify spam, malware and URL based threats, and phishing campaigns from reaching users and preventing further damage even if the user has received malicious emails

ENDPOINT PROTECTION

ENDPOINT PROTECTION

Agent-based solutions that provide combined malware protection and endpoint response and detection capabilities to prevent the infection and lateral spread of malicious activity as well as incident response capabilities such as endpoint isolation and remote investigation capabilities.

ENDPOINT PROTECTION

ENDPOINT PROTECTION

Agent-based solutions that provide combined malware protection and endpoint response and detection capabilities to prevent the infection and lateral spread of malicious activity as well as incident response capabilities such as endpoint isolation and remote investigation capabilities.

ENDPOINT PROTECTION

ENDPOINT PROTECTION

Agent-based solutions that provide combined malware protection and endpoint response and detection capabilities to prevent the infection and lateral spread of malicious activity as well as incident response capabilities such as endpoint isolation and remote investigation capabilities.

FILE AND DATABASE ENCRYPTION

FILE AND
DATABASE ENCRYPTION

These solutions allow for more granular/targeted encryption of structure and unstructured data such as a specific document, folder, or database tables and fields. This is beyond the capabilities of whole disk encryption solutions and allows for advanced access control to the encrypted data.

FILE INTEGRITY MONITORING (FIM)

FILE INTEGRITY MONITORING (FIM)

A FIM solution watches for changes to sensitive or business critical files or code base and provides alerts on change activity to be investigated. This is a requirement for PCI DSS.

MULTIFACTOR AUTHENTICATION AND ACCESS (MFA)

MULTIFACTOR AUTHENTICATION AND ACCESS (MFA)

The purpose is to enhance security of authentication across multiple applications by requiring additional factors from the user for successful authentication.

SENSITIVE DATA RECOVERY AND MANAGEMENT

SENSITIVE DATA RECOVERY AND MANAGEMENT

These solutions help identify the locations of sensitive data within on premise and cloud-based systems and databases and track movement of the data by tagging and alerting on data security policy violations. Additional capabilities allow for the remediation of the violations through several mechanisms including encryption, redaction, and quarantine.

SECURITY INFORMATION AND EVENT MANAGEMENT (SIEM)

SECURITY INFORMATION AND EVENT MANAGEMENT (SIEM)

These solutions collect system and appliance logs from multiple sources for central query capabilities and storage. Advanced security analytics are applied to the collected logs to identify the presence of unwanted behaviors or threats on the systems or network.

SECURITY INFORMATION AND EVENT MANAGEMENT (SIEM)

SECURITY INFORMATION AND EVENT MANAGEMENT (SIEM)

These solutions collect system and appliance logs from multiple sources for central query capabilities and storage. Advanced security analytics are applied to the collected logs to identify the presence of unwanted behaviors or threats on the systems or network.

SINGLE SIGN-ON AND FEDERATION

SINGLE SIGN-ON AND FEDERATION

These solutions provide single sign on capabilities between unrelated applications and systems via an authentication proxy. This is typically achieved by a central authentication gateway which then provides access tokens to allowed applications.

THIRD PARTY RISK MANAGEMENT

THIRD PARTY RISK MANAGEMENT

The purpose of the solution is to provide an external view of the threat and security posture of a company. Typically, these types of tools are used as a part of a 3rd party vendor management program but are also utilized for self-assessments. The posture of the target to be managed and scored is tracked over time and the specific reductions and improvements in the target posture are tracked and detailed.

VIRTUAL MACHINES

VIRTUAL MACHINES

Widely utilized virtualization software to quickly deploy and scale secure systems and applications for on premise and cloud environments.

EXTERNAL ASSET DISCOVERY

EXTERNAL ASSET DISCOVERY

This solution can also be utilized to discover internet exposed assets that may not be known or managed by a company.

VULNERABILITY SCANNING AND MANAGEMENT

VULNERABILITY SCANNING AND MANAGEMENT

The purpose is to scan external and internal assets for the presence of known vulnerabilities. This is essential for any vulnerability management and patching program to identify and track vulnerabilities and which system are patched in between scans. Also includes the ability to perform automated web application scanning.

VULNERABILITY SCANNING AND MANAGEMENT

VULNERABILITY SCANNING AND MANAGEMENT

The purpose is to scan external and internal assets for the presence of known vulnerabilities. This is essential for any vulnerability management and patching program to identify and track vulnerabilities and which system are patched in between scans. Also includes the ability to perform automated web application scanning.

WEB APPLICATION FIREWALLS

WEB APPLICATION FIREWALLS

A WAF is a purpose-built solution that protects against web based attacks such as SQL Injection, cross-site scripting, illegal resource access requests, and backdoors that hackers typically utilize to breach systems, introduce malware, and exfiltrate data. Additionally, WAFs may provide DDOS protection, load balancing, and content distribution management capabilities (CDM).

DARK AND DEEP WEB THREAT MONITORING

DARK AND DEEP WEB THREAT MONITORING

External Risk Protection from Threats Targeting Your People, Brand, and Assets. Continuously monitor thousands of data sources across the public, deep and dark web to gain the insights you need to detect and act on emerging cyber-physical threats before damage occurs.

SECURE DEVOPS TRAINING

SECURE DEVOPS TRAINING

Training for developers should always include how to securely code applications that are resilient to the common attack techniques hackers utilize.

NETWORK MICRO-SEGMENTATION AND ASSET DISCOVERY

NETWORK MICRO-SEGMENTATION AND ASSET DISCOVERY

These solutions proactively identify assets on your network and allow for the granular implementation of segmentation via software agents. This eliminates the need to upgrade firewall hardware and software and allows for simpler network segmentation that will not require the re IP of deployed systems and devices.

NEXT GENERATION FIREWALLS

NEXT GENERATION FIREWALLS

Next gen firewalls enhance border security by allowing for more granular control of traffic between networking segments. This is accomplished by identifying which applications and users are accessing resources through the firewall and allowing for granular policy to be applied based on applications and users vs. the traditional port and protocol of legacy firewalls. Next gen firewalls also include Intrusion Detection and Prevention, URL Filtering, advanced malware sandboxing and behavior analytics, as well as packet capturing.

PRIVILEGED ACCOUNT MANAGEMENT(PAM)

PRIVILEGED ACCOUNT MANAGEMENT(PAM)

A PAM solution manages identified privilege account passwords by rotating passwords, forcing check-in and check outs of credentials, and auditing access using administrative accounts. Additionally, they may provide remote access capabilities similar to remote desktop and session recording which can be especially useful for monitoring access from contractors or third parties.

HALOCK is a trusted cyber security and risk management consulting firm headquartered in Schaumburg, IL, near Chicago. HALOCK advises clients on reasonable information security strategies, risk assessments, third-party risk management (TPRM), penetration testing, security management,  architecture reviews, and HIPAA, Privacy, & PCI compliance throughout the US.