SALTY CLOUD, PBC — Department of Defense SBIR Phase I: AF192-001

Description

On a daily basis cybersecurity analysts and operators are inundated with incongruent information and alerts that far exceed their capability to respond. This results in major incidents routinely being missed, unauthorized data released and systems compromised. Panopticon is a purpose built Security Orchestration, Automation and Response (SOAR) solution for last mile incident response across large, distributed networks. Panopticon consolidates team and incident data, identifies and reports issues in real time, and automates the vast majority of downstream actions including: disabling a user account, null routing a system, and/or sending additional notifications. Of note automated workflows (eg, chaining correlation rules, email/alert markup, multistep workflows including downstream actions) are accomplished directly through the UI empowering operators/ analysts to build rules, workflows and take automated action without scripting. Current customers include several large universities, a large MSSP and a statewide network SOC. Our objective is to conduct a feasibility study and demonstrate Product-USAF Fit for Panopticon as well as to identify the appropriate initial USAF customer and end user for a Panopticon Phase II transition trial and/or Phase III AF/DoD direct sales.