Integration at a glance
| Item | Detail |
|---|---|
| Partner product | Forescout eyeInspect (with Command Center) |
| Integration method | DeRISK reads eyeInspect data through its API. Read-only. The API connection needs no manual effort and keeps the data current for analysis. Manual import of API JSON output files is also supported, so the OT environment never needs a standing connection to DeRISK in the cloud. |
| Data used | Asset inventory, vulnerabilities, monitored networks, communication links |
| Built and supported by | DeNexus. Listed on the Forescout Marketplace as “eyeInspect for DeRISK.” |
| DeRISK grades supported | Level 4 · Evidence-Grade (facility data) and Level 5 · Engineering-Grade (zone data), as each grade becomes available |
The challenge
eyeInspect shows OT teams what they have and what is exposed. A large OT estate can hold thousands of vulnerabilities across many sites. Without a common financial measure, teams cannot rank them or show leaders which projects are worth the money.
How it works
eyeInspect discovers OT assets, maps their communications and finds vulnerabilities.
DeRISK CRQ reads that data on a schedule through the eyeInspect API.
DeRISK combines it with threat intelligence, each facility’s business data and, where available, firewall data.
DeRISK simulates how likely (frequency) and how severe (magnitude) cyber incidents could be, and reports the results in dollars.
What you get together
Risk in financial terms.
Expected annual loss and loss at higher confidence levels, by facility and company.
Vulnerabilities ranked by dollar impact.
A small share of vulnerabilities often drives most of the loss. Find them.
Progress you can show.
DeRISK keeps the history, so leaders see whether risk is going down.
Requirements
- Forescout eyeInspect, with or without Command Center
- A read-only eyeInspect API account for DeRISK
- For automatic collection, a network path from DeRISK to eyeInspect (not needed for manual JSON import)
- A DeRISK CRQ subscription at Evidence-Grade or Engineering-Grade, as each grade becomes available
Proof
A leading renewable energy company in the Americas, 64 wind and solar facilities.
With Forescout eyeInspect and DeRISK CRQ v5, it ranked more than 10,000 vulnerabilities by dollar impact. The top 5 drove 79% of the risk. Five large solar plants carried more than half of total expected annual loss. Over five quarters, expected annual loss fell by ~38%.
About Forescout
Forescout is the only automated cybersecurity vendor with a single platform for continuously identifying and mitigating risk across all managed and unmanaged assets – IT, IoT, IoMT and OT – from campus to data center to edge. For more than 20 years, we have delivered cybersecurity innovations that protect many of the world’s largest, most trusted organizations in finance, government, healthcare, manufacturing and other industries.
The Forescout Platform delivers comprehensive capabilities for network security, risk and exposure management, and extended detection and response. With seamless context sharing and workflow orchestration via ecosystem partners, it enables customers to more effectively manage cyber risk and mitigate threats.