Governance
What we have
- Maps findings to ISO 27001, SOC 2, PCI DSS and NIST CSF controls.
In the oven
- Measures how staff react to simulated phishing.
Our capabilities
An attacker needs one gap. You're expected to cover a wide front.
A small team can't watch a wide front by hand, and a single missed gap is all an attacker needs. We start with attack testing and rule-based code scans, and we are building defense and investigation next. These Phalanx features are tested internally. Coming soon and In the oven mark what isn't built yet.
Security leads and small security teams whose attack surface is bigger than they can cover.
Attack
What we have
- Tests your apps and sites for weak spots.
- Maps what an outsider sees of you online.
- Sends simulated phishing via your mail.
- Writes up what the tests found.
Coming soon
- Tests if stolen passwords can be cracked.
- Tests WebSocket and gRPC for weaknesses.
- Tests access between accounts.
Defense
In the oven
- Checks your setup against known standards.
- Checks your cloud accounts' setup.
- Alerts your team and tracks the response.
Coming soon
- Gives your team ready steps to follow.
Build
What we have
- Scans your code and your live app.
- Tests your running app with attacks.
Coming soon
- Reviews how your GitHub secrets are kept.
Investigation
In the oven
- Simulates attacks and scores what you catch.
- Builds a timeline for each security case.
Coming soon
- Tunes detection from what you missed.
- Rebuilds how a breach unfolded.
Signals
In the oven
- Tracks open weaknesses against your targets.
- Maps your internal network and devices.
Intelligence
In the oven
- Follows fresh threats that could reach you.
- Checks staff accounts against breaches.
- Will scan your public repos for leaked keys.
- Will show the file, line and how it fails.
Coming soon
- Hunts your systems for hidden threats.