Key Capabilities / Features

Bitsight’s Discovery and Attribution Engine combines two of Bitsight’s flagship technologies: Bitsight Groma and Bitsight Graph of Internet Assets (GIA).

Groma continuously scans the internet to discover a growing list of security issues, like vulnerabilities and misconfigurations. The solution enables Bitsight to have a significantly more accurate and up-to-date view of its customers’ IT assets, along with those of any third and fourth parties that they interact with, and allows Bitsight to observe any positive or negative changes to the risk posture of these entities more rapidly.

Graph of Internet Assets (GIA) combines AI models with human curation to map the world’s internet-connected assets. GIA has been trained on a data set that spans over 540,000 organizations and millions of assets and evidentiary data points – the largest set of training data of this kind in existence. Not only is GIA’s training data set large in size, it’s also been curated by Bitsight’s research team to create a force multiplier for asset discovery & attribution. In August, Bitsight introduced new AI models within GIA that include auto-ranked IP and domain attribution, accelerated attribution refresh speeds, and new “probable assets” data sets.

By bringing together two of Bitsight’s core data sourcing and analysis technologies, the Discovery and Attribution Engine creates an expansive view of the world’s ecosystem of interconnected entities, individual digital footprints, and risk posture.

How we are different

Bitsight can pursue a greater breadth and depth of scanning coverage through its Groma solution, incorporated into the Discovery and Attribution Engine. Currently, Groma’s scanning activities encompass 40 million+ monitored organizations, 250 million+ host names, and 4 billion+ routable IP addresses. Because of this scale, Groma has enabled Bitsight to triple its vulnerability coverage compared to just one year ago and triple the number of Common Vulnerabilities and Exposures (CVEs) covered by Bitsight’s scanning efforts.

Bitsight has complete control over scanning frequency, enabling the Discovery and Attribution Engine to minimize the average amount of time it takes to detect new vulnerabilities and changes to customer environments. In fact, a recent study from Greynoise.io found that Bitsight can find new assets within 2 hours of them becoming visible on the internet, more than most leading competitors. In a world where an enterprise’s digital footprint is constantly growing, this real-time scanning for assets is critical for identifying and mitigating risk in a timely manner.

The combination of proprietary AI models and human intelligence also sets Bitsight’s Discovery and Attribution Engine apart from its competitors. The AI models that power GIA, a critical component of the Discovery and Attribution Engine, are trained with a data set expertly curated by Bitsight’s 100+ security researchers. Because of this human curation, GIA models are continually learning and evolving based on the most up-to-date and accurate data. Further, Bitsight also applies human curation to the Discovery and Attribution Engine’s output process, ensuring that its research team verifies the results to deliver more accurate entity maps. This symbiotic relationship between AI intelligence and human curation furthers Bitsight’s lead as the industry’s data quality leader.