1 THIRD-PARTY RISK MANAGEMENT For your website Protect your most valuable asset - your web presence Idan Cohen, Q3 2019
The untold ‘ supply-chain ’ challenge: THIRD-PARTIES ON WEBSITES
3 Let ’ s understand What is a web third-party code? Integrated into Controlled All on your website Remotely client's side Third-parties are added to Third parties are An installed third-party sites to improve only runs on the browser installed on your and at the client side. technological functionality website from external and business scalability. sources uncontrolled.
4 The growing number of THIRD-PARTIES You can ’ t ignore it anymore. The demand for third-party solutions is rising high, and for a good reason. With features like accessibility, live-chats, comments, reviews, personalization and localization are a most today. 85 80 Av. # of 3rd Party Services 60 37 40 15 0 2015 2016 2017 2018 Source: Yottaa 2018
5 THE UNTOLD Threats of third-parties 01. Supply chain attacks my heritage 02. No control over your vendors ’ errors 03. Privacy risks are escalating today
7 01 British Airways September 2018 . Scope 380K Credit Cause Result MageCart £1 Billion card details gang cost 02. Ticketmaster April 2018 Scope 40k Client Cause Result Hacked ~$1M records vendor lost 03. Amazon S3 Buckets IT HURTS! May 2019 Scope 17,000 Cause Result Bug ? Third-Party Breach Examples Websites Misconfig
8 What are the Risks? Brand reputation damages Sensitive data leakage Privacy breaches Accountability Financial losses
10 Meet reflectiz We are a cyber security company that helps businesses mitigate security and privacy risks resulting from third-party technologies installed on their websites
11 Trusted by reflectiz Marius Nacht, Co-Founder & Chairman, CheckPoint. About Us Anchor Investor at aMoon Fund reflectiz is an Israeli cyber-security company founded in 2016 by an experienced team of professionals, Israel Innovation Authority, combining in depth development granted reflectiz special funding, awarding expertise with unique cyber and us for our unique innovative technology. hacking skills and knowhow .
12 An ongoing website scan cycle The reflectiz INSPECT SCAN In-depth page analysis Solution Automated remote performed scan for by an entire designated website SCAN INSPECT browser Our proprietary technology is based on complex algorithms, cyber expertise and advances machine learning capabilities. This is how it works behind the scenes ANALYZE SIMPLIFY Data Producing SIMPLIFY ANALYZE analysis and filtered cyber results and algorithmics actionable procedures items
17 Why do you need an ongoing Scan? Baseline Reoccurring creation and analysis for change billions of management records Multiple Threat vendor code detection on modification soft real-time tracking
18 What do you Get? Visibility Risk Mapping Alerts Full third party To each and every Active alerts on 3 rd party component Asset Management important (Baseline) threats and risks and vendor Dashboards An easy to use and friendly user interface
19 Simple. Automatic. Remote No SETUP No INSTALLATION No INTEGRATION
20 So … What do you NOTHING Need To Do? Alerts and We will add Keep your notifications website your are sent domains under your automatically control
21 Questions? Let ’ s schedule a demo Idan Cohen, CEO idan@reflectiz.com +972-504408499
Recommend
More recommend
