Armis offers free access to real-time cyber threat database

Armis has made its Vulnerability Intelligence Database available to organisations at no cost in an effort to improve the way security teams identify and address cyber threats.

The database has been developed to provide a comprehensive view of vulnerabilities by integrating intelligence on exploited vulnerabilities, emerging threats, and data-driven insights contributed by the broader cybersecurity community. This resource is powered by Armis Labs and leverages the capabilities of the Armis Asset Intelligence Engine along with early warning features.

Security teams using the database will be able to access real-time data on exploits as well as artificial intelligence-driven analysis. The solution is designed to help organisations efficiently prioritise and mitigate threats before cyber attackers can exploit them. The database also receives input from Armis Centrix for VIPR Pro, enabling Armis customers to benefit from crowdsourced information which supports the prioritisation process specific to their industries.

The company's intention is to help organisations avoid overreliance on single sources of vulnerability data such as the MITRE CVE database. The launch follows recent uncertainty surrounding the funding of the MITRE CVE database and is timed to address concerns about fragmentation or delays in vulnerability disclosure.

Nadir Izrael, Chief Technology Officer and Co-Founder at Armis, said: "As threat actors continue to amplify the scale and sophistication of cyberattacks, a proactive approach to reducing risk is essential. The Armis Vulnerability Intelligence Database is a critical, accessible resource built by the security community, for the security community. It translates vulnerability data into real-world impact so that businesses can adapt quickly and make more informed decisions to manage cyber threats."

Research cited by Armis indicates that 58% of global organisations currently respond to threats only after damage has occurred. Additionally, 22% of IT decision-makers identify the lack of continuous vulnerability assessment as a significant gap in their cybersecurity operations. Many organisations continue to track vulnerabilities manually, such as by using spreadsheets, which can leave networks exposed to emerging risks.

Armis has also been authorised as a CVE Numbering Authority (CNA) by the Common Vulnerabilities and Exposures (CVE) Program. This enables the company to review and assign CVE IDs to newly identified vulnerabilities. The CVE Program is an international initiative focused on identifying and cataloguing publicly disclosed cybersecurity vulnerabilities.

Commenting on the company's new role as a CNA and the launch of the database, Izrael added: "We are focused on going beyond detection to provide real security – before an attack, not just after. It is our duty and goal to help raise the tide of cybersecurity awareness and action across all industries. This is key to effectively addressing the entire lifecycle of cyber threats and managing cyber risk exposure to keep society safe and secure."

The Armis Vulnerability Intelligence Database is available for early preview, with plans for a wider release later in the year.