Press Releases
ICSA LABS VALIDATES CYBER-ARK'S VAULTING TECHNOLOGY
Dedham, Mass. - April 12, 2006 - Cyber-Ark® Software Inc., the information security software company that develops and markets digital vaults for securing and managing highly-sensitive information within and across global enterprise networks, has announced their Vaulting platform has been evaluated as providing a secure platform for secure information sharing and exchange in a report issued by ICSA Labs this week. ICSA Labs, an independent division of Cybertrust, is the security industry's central authority for research, intelligence, and certification testing of security products.
In this report, ICSA evaluates the Vaulting technology, which is Cyber-Ark's core technology in its product lines that consists of the Enterprise Password Vault™, Network Vault and Inter-Business Vault®, and states that the Digital Vault platform provides a secure, encrypted file storage and sharing environment without introducing any new security vulnerabilities to a customer's existing network infrastructure. To date, Cyber-Ark is the only Vaulting technology that has been verified and tested in this capacity at ICSA.
ICSA Labs analysts validated that the Vault protects against network level attacks by securing all superfluous ports by deactivating and covering all ports but the Vault's communication channel. The evaluation also validated key functionality of the Digital Vault solution including the ability to reject malformed or malicious control commands, as well as the ability to provide fine-tuned access control such as IP address and time of day restrictions for enhanced security.
"In order to meet our customers' and partners' security requirements, we felt it was important to have the security industry's leading independent testing firm evaluate our Digital Vault platform", said Nir Gertner, Chief Technology Officer of Cyber-Ark Software. "As we continue to grow and mature within the next level of Identity Management, Privileged User Management, we will work with reputable firms such as ICSA Labs to provide our customers with the most secure and scalable Vaulting solutions on the market today."
Cyber-Ark's Vaulting technology was also evaluated by ICSA Labs around the following:
Platform Security: ICSA Labs requires that administrative functions exist to properly configure the Vault. ICSA Labs also performs tests to reasonably ensure that unauthorized control of the product's administrative functions cannot be obtained. ICSA Labs determined that the Vault provided adequate administrative functionality to provide a secure environment.
Functionality: The goal of the functionality portion of the evaluation is to determine if the services and features offered by the System Under Test (SUT) function as expected. Any claims made by the vendor are subject to testing and verification of truth and accuracy. ICSA Labs determined that all indicated functionality operated properly.
Logging: The goal of ICSA Labs Premier Services logging evaluation is to determine if the SUT can capture and log critical, specific information elements in the context of specified events. The Cyber-Ark logging system on the server stores log data in the Vault's operational database. ICSA Labs determined that the logging system of the Vault satisfies the requirements for accurate logging and provided all pertinent log information.
Documentation: ICSA Labs found that through the documentation listed in the Test Configuration section during installation allowed them to correctly configure all features on the Vault.
"As we continue to evaluate and identify new security offerings in the market, we are constantly keeping the enterprise customer in mind to insure that each solution in ICSA Labs is put through a rigorous process, so end users receive the level of assurance needed for critical systems," Said George Japak, vice president of ICSA Labs.
Click here to view a copy of the report
About Cyber-Ark
Cyber-Ark Software is an Information Security company that develops and markets digital vaults for securing and managing sensitive information within and across global enterprise networks. Based on it's patented Vaulting Technology™, Cyber-Ark's digital vault products include: The Inter-Business Vault, a secure infrastructure for cross-enterprise data exchange of highly-sensitive information; the Network Vault®, for secure storage and management of highly-sensitive documents, and the Enterprise Password Vault, for the secure management of administrative, emergency and privileged user passwords.
Cyber-Ark Software was founded in 1999 by a team of industry-recognized security experts with the aim of producing a truly effective security offering where complete end-to-end security was the initial, key design consideration rather than applied as an afterthought. Today, over 200 Global 1000 companies rely on Cyber-Ark Software's digital vault solutions for managing, sharing and securing highly-sensitive information both within their organization and with their partners, vendors and customers. Cyber-Ark Software is privately held and backed by some of the world's most successful venture capitalists, including Jerusalem Venture Partners, Seed Capital Partners (a SOFTBANK Affiliate), JP Morgan/Chase Partners and Vertex Management.
The Company is located in Newton, Mass. and on the World Wide Web at www.cyber-ark.com.
About ICSA Labs
ICSA Labs, an independent division of Cybertrust, Inc., offers vendor- agnostic testing and certification of security products. Hundreds of the world's top security vendors submit their products for testing and certification at ICSA Labs. The end-users of security technologies rely on ICSA Labs to authoritatively set and apply objective testing and certification criteria for measuring product compliance and reliability. The organization tests products in key technology categories such as anti-virus, anti-spyware, firewall, IPSec VPN, cryptography, intrusion detection, PC firewall, content security, SSL-VPN and Wireless LAN. For more information about ICSA Labs, please visit: http://www.icsalabs.com.
Cyber-Ark Software Press Contact:
Jason Ouellette
PAN Communications
978-474-1900
cyber-ark@pancomm.com
Adam Bosnian
Cyber-Ark Software
781/251-0670
Adam.Bosnian@cyber-ark.com