Cloud Security, Security Operations
Eureka's data security posture management product can be integrated natively
Michael Novenson (Michael Novenson) •
June 7, 2024
Tenable will buy a startup founded by Israeli military and veterans Palo Alto Networks to add data security posture management to its cloud security platform.
See also: Cloudflare's policies on data privacy and law enforcement requests
The Baltimore-area exposure management vendor said its proposed acquisition of Tel Aviv, Israel-based Eureka will help Tenable provide data discovery, classification and risk assessment to customers, said Shai Morag, senior vice president and general manager of cloud security at Tenable. Integrating Eureka into Tenable will give customers a unified platform to view and manage data security risks, prioritizing threats based on end-to-end context.
“What sets us apart is the way we plan to integrate Eureka’s DSPM into our platform, providing one UI, one context and ensuring a seamless user experience,” Morag told Information Security Media Group.
Eureka was founded by Liat Hayun, Cortex XDR product lead at Palo Alto Networks, and Microsoft Cloud Application Security Engineering Lead Asaf Weiss, who are CEO and CTO, respectively. Hayon and Weiss were together at Palo Alto Networks from 2015 to 2018, served together in the Israel Defense Forces from 2009 to 2014, and both attended Hebrew University in Jerusalem. Both will join Tenable (see: Why Tenable is eyeing Israeli data security startup Eureka)
How defensible, Eureka will come together
Native integration of all of Eureka's data security capabilities will give Tenable customers a consistent user experience without the need for multiple products. Morag said the combined Tenable-Eureka platform will provide improved visibility, risk prioritization and end-to-end security for cloud environments. Terms of the deal were not disclosed, but Calcalist reported that Tenable is paying “tens of millions of dollars.”
“Customers will get everything related to data security as part of our cloud platform without having to move to different products,” Morag said. “They will have one platform, one place where they see everything — everything they have in the cloud, all the resources they have in the cloud, all the data they have in the cloud, and all the contacts they need in the cloud.”
Morag said Eureka's focus on data identification, risk understanding, and access management — coupled with its ability to provide detailed insights into data access and use — makes the company a perfect fit for Tenable's cloud security strategy. The plan to integrate DSPM natively into its own cloud security platform rather than offering the capability as a standalone product characterizes Tenable's integration strategy.
According to Morag, understanding the context of vulnerabilities – such as whether a machine is publicly exposed or whether it can assume a distinct identity – is crucial to prioritizing risks. He said incorporating data classification and context into risk assessment will allow for more accurate prioritization of cyber issues, strengthening the overall security posture of the end customer.
“Think of a vulnerable machine,” Morag said. “You want to understand whether or not this represents a significant risk to the organization.” “The answer to that depends on the context, which means that if it's publicly disclosed, it's much more so than if it's not publicly disclosed. If it can assume a very distinct identity, that's a much more serious risk to the organization. So, elements of data context are important.” very very.”
Tenable's seventh acquisition since 2019
The integration will combine Eureka's data security posture management functionality with Tenable's existing data architectures and cloud resources, and is expected to be completed in late 2024. This approach enhances ease of use and accuracy in risk prioritization and ensures that customers have a comprehensive view of data security as part of their security posture The cloud, according to Morag.
“We've heard more and more in the last 12 months, asking our customers to include DSPM capabilities as part of their cloud platform,” Morag said.
Key metrics for post-acquisition success will be the rate of adoption of data security posture management capabilities by Tenable's existing customers and the resulting increase in revenue, according to Morag. He said Tenable will continue to look for growth opportunities organically and through strategic acquisitions.
“With the acquisition, we will have stronger DSPM capabilities than most of our competitors, putting us at the forefront of the market,” Morag said.
Eureka will be Tenable's seventh acquisition since the winter of 2019 and its first since purchasing cloud security startup Ermetic in October for $265 million. This deal will help security teams make efficient and accurate remediation decisions. Fifteen months before acquiring Ermetic, Tenable purchased Bit Discovery for $43.8 million to help organizations discover, attribute and monitor online assets.
