ExtraHop supports Amazon Security Lake to centralise security data on AWS

ExtraHop, a specialist in cloud-native network detection and response NDR, has announced support for Amazon Security Lake from Amazon Web Services (AWS). 

The offering will allow customers to share network insights from Reveal(x) 360, the ExtraHop NDR platform, on AWS from cloud, on-premises, and custom sources into a purpose-built data lake stored in their account.

According to an ExtraHop report, some 67% of IT and cybersecurity professionals experience friction in the cloud, including visibility and coverage gaps. Amazon Security Lake helps to overcome these challenges by automatically centralising security data from disparate sources into a purpose-built data lake, allowing customers to store, analyse, and query insights from any environment, application, or solution at petabyte scale.

When integrated with Amazon Security Lake, ExtraHop securely feeds detections identified on the network to the customers Amazon Security Lake. Customers who subscribe to Amazon Security Lake can access and take action with ExtraHop data, as well as data from other sources in Amazon Security Lake, for faster threat detection, investigation, and response.

"Our long-term relationship with AWS has provided organisations with significant advantages over the years as they realise the tremendous value derived from network intelligence in cloud environments," says Raja Mukerji, co-founder and Chief Customer Officer, ExtraHop. 

"This new integration with Amazon Security Lake is the next natural step in our relationship. ExtraHop customers on AWS now gain complete end-to-end visibility, streamlined investigations, and immediate value by integrating their network insights with best-of-breed endpoint and log sources," Mukerji says.
 
ExtraHop says aggregating data from multiple tools spread across cloud and hybrid environments is a complex and challenging task for security and operations teams. These challenges often lead to gaps in visibility and monitoring while delaying threat detection, investigation, and response. 

With Amazon Security Lake, a new data lake in AWS for security logs, organisations can significantly reduce complexity and close security gaps. 

By integrating ExtraHop Reveal(x) 360 with Amazon Security Lake, AWS customers can leverage context-rich network data to enhance the security of workloads and applications.

ExtraHop is the cybersecurity partner enterprises trust to reveal the unknown and unmask the attack. The companys Reveal(x) 360 platform is the only network detection and response platform that delivers the 360-degree visibility needed to uncover the cybertruth. 

For ExtraHop users, Amazon Security Lake offers another method for leveraging high-fidelity network intelligence from Reveal(x) 360—including detections of indicators of compromise (IOC)—with other security logs for faster threat detection, deeper investigation, and more confident incident response.

For line of business, Amazon Security Lake optimises the cost of storing and querying security data from single cloud, multicloud, and on-premises tools and environments. Security Lake also provides a set of core AWS-native security logs to further minimise costs and improve performance.