FeaturesReduce your threat surface
Covalence is a network and endpoint monitoring and analysis system that identifies malicious and anomalous activity while providing a powerful view into your network. It features advanced monitoring and analytics to measure, manage and reduce the threat surface of your network and associated infrastructure.
Threat Surface Measurement
Access and review network, endpoint and application data points, identify attacker-accessible assets. Get uniquely comprehensive insight into what systems are on your network, and what they’re doing.
Threat Surface Minimization
Compare enterprise network configuration and security posture reporting against key mitigation measures like the Australian Signals Directorate’s Essential 8, Communications Security Establishment’s Top 10 IT Security Actions, and the SANS 20 Critical Security Controls. Similarly, improve your security posture and integrate results into other tools like the NIST Cyber Security Framework.
Incident Detection & Remediation
Strengthen the resilience of your IT network. Use Covalence’s machine learning and discrete analytic tools to identify suspicious/malicious threat actor behaviour and obtain data for remedial activity.
Simple, Flexible Deployment
Use existing infrastructure to provide data to Covalence, or use Covalence’s endpoint and network sensors to capture full data from your network, and even record it for future analysis and incident response. Covalence is available for deployment on your own systems, as well as in virtual and physical appliance configuration.
BrochureGet In-Depth and Under the Surface
Covalence is an easily deployed and sophisticated analytic system that provides insight into your network activity. The system has been designed with you in mind: integrate within an Enterprise environment to identify anomalies and support your response capability, or use Covalence as a service and let Field Effect take care of monitoring and management.
Covalence may be deployed in as little as a single virtual machine, receiving NetFlow feeds from your network devices or deployed in a distributed manner with full take (PCAP) sensors at key network points and endpoint agents installed on your hosts.