Additional Info

CompanyDarkLight
Websitehttps://www.darklightcyber.com/
Company size (employees)12
Type of solutionSoftware

Overview

DarkLight is a next generation cybersecurity analytics and automation platform. Driven by artificial intelligence (AI), this groundbreaking solution is a force multiplier which sits on top of existing security investments and leverages the reasoning, knowledge and experience of security analysts to deliver human-quality results, at scale.

For most enterprises, cybersecurity has become a big-data analytics challenge. The sheer volume of alerts overwhelms even the most efficient Security Operation Centers (SOC). DarkLight’s proprietary approach intelligently fuses the massive data streams from the organization’s current network and security tools, with threat intelligence sources and contextual information of the enterprise to a cybersecurity knowledge and activity graph. Based on the experience and domain expertise of the cyberanalyst, DarkLight automates and orchestrates their analytic tradecraft, leveraging human knowledge to support a data-driven, intelligence-based active defense. As a result, DarkLight produces cybersecurity knowledge that yields correct predictions and reliable outcomes that are applied to Courses of Action, acting as a “virtual analyst” at scale and 7x24x365.

There are three major benefits of DarkLIght:
1. FORCE-MULTIPLIER which enhances human analyst’s reasoning. Acting as a Virtual Analyst, it improves performance by 10X to 100X+
2. CAPTURES KNOWLEDGE and reasoning for retention by the enterprise. Even a junior analyst or one new to the org can look at DarkLight to see how the system uses this knowledge. Most importantly, when the inevitable “brain drain” does occur – the analyst walks out the door but the knowledge he or she has developed stays behind.
3. INTELLIGENTLY FUSES data from disparate sources (including network, threat intel and enterprise knowledge) for analysis. Normally this is a tedious and time-intensive activity done by the organization’s cyber-analysts. With DarkLight doing the heavy lifting, both the human and product investments the organization has made, work more effectively.

How we are different

The top benefits that DarkLight delivers to our enterprise and MSSP clients are:


1. FORCE-MULTIPLIER which enhances human analyst's reasoning. Acting as a Virtual Analyst, it improves performance by 10X to 100X+. In an environment where analysts are in great demand, this goes a long way to solve the workforce shortage.


2. CAPTURES KNOWLEDGE and reasoning for retention by the enterprise. Even a junior analyst or one new to the org can look at DarkLight to see how the system uses this knowledge. Most importantly, when the inevitable “brain drain” does occur - the analyst walks out the door but the knowledge he or she has developed stays behind.


3. INTELLIGENTLY FUSES data from disparate sources (including network, threat intel and enterprise knowledge) for analysis. Normally this is a tedious and time-intensive activity done by the organization’s cyber-analysts. With DarkLight doing the heavy lifting, both the human and product investments the organization has made, work more effectively.