Carnegie Mellon University Selects Rapid7’s NeXpose for its Broad Asset Protection and Centralized Risk Monitoring, Ensuring Campus-wide Security
NeXpose Meets Leading Technology School’s Requirements for Vulnerability Scanning, Co-Development and Higher Education Experience
Boston - May 8, 2007 - Rapid7 today announced that Carnegie Mellon University, a global research university recognized for its unparalleled technology programs, has selected the NeXpose award-winning vulnerability management solution for securing its campus-wide systems and networks. NeXpose will enable Carnegie Mellon to perform extensive scanning, conduct more centralized monitoring and effect root cause analysis.
"As we tested NeXpose, we found that the product’s evolution mapped to our needs, which we attribute to Rapid7's responsiveness to our input as well as its experience in the higher education industry," stated Mary Ann Blair, director of information security at Carnegie Mellon. "NeXpose offers exactly what we sought in terms of feature sets, such as support for Linux, a secure Web interface and the ability to create and export customized reports. NeXpose became even more attractive with the introduction of its PCI compliance capabilities."
The NeXpose features Carnegie Mellon found most prominent are its open API architecture, its asset groupings and the access controls with those assets.
"With the open API, we will have the ability to write our own software to manipulate NeXpose and create, for example, auto provisioning accounts and access controls," stated Jason Carr, security engineer at Carnegie Mellon. "The asset groups with access control will enable us to allow many users to view their machines and reports without having access to other machines they don't own."
Carnegie Mellon has a history of valuing collaborative teamwork, and for that reason the degree of partnership formed with Rapid7 has made an impression.
"We had the option of building our own vulnerability scanning system, but the opportunity to partner is much more important and mutually beneficial," stated Blair. "Rapid7's ability to listen and work with us was a differentiator. The company brings not only an understanding of our organization and a commitment to network security, but with the integration of NeXpose with our environment, we will now possess a world-class vulnerability detection system."
Based in Pittsburgh with locations in Silicon Valley, CA and around the world, Carnegie Mellon and its Software Engineering Institute are the home of the CERT® Coordination Center, which researches and reports on security vulnerabilities on the Internet and in networked systems. CERT's 2006 presentation, "Vulnerability Discovery: Bridging the Gap Between Analysis and Engineering," advocates a proactive rather than a reactive approach to vulnerability detection to achieve confidence in networked systems.
About Carnegie Mellon University
Carnegie Mellon is a private research university with a distinctive mix of programs in engineering, computer science, robotics, business, public policy, fine arts and the humanities. More than 10,000 undergraduate and graduate students receive an education characterized by its focus on creating and implementing solutions for real problems, interdisciplinary collaboration, and innovation. A small student-to-faculty ratio provides an opportunity for close interaction between students and professors. While technology is pervasive on its 144-acre campus, Carnegie Mellon is also distinctive among leading research universities for the world-renowned programs in its College of Fine Arts. For more, see www.cmu.edu.
About Rapid7 NeXpose
The award-winning Rapid7 NeXpose Unified Vulnerability Management (UVM) is an all-in-one security solution that scans networks, Web applications, databases, to locate threats, assess their risk to the environment, devise a remediation plan and implement the ticketing process. NeXpose incorporates an expert system to build a knowledge base of facts on the environment it explores and model potential targeted attacks to expose all existing threats. NeXpose provides robust reporting capabilities that ensure compliance with governmental regulations, corporate security configuration policies, and the PCI Data Security Standard. NeXpose is available as a "plug and play" appliance, downloadable software, or an On-Demand hosted solution.
About Rapid7
Rapid7 is the leading provider of Unified Vulnerability Management (UVM) Solutions. Rapid7 NeXpose UVM provides network, database and web application vulnerability management for enterprise deployments and small to medium businesses. Rapid7 was founded in 2000 by a team of software industry veterans who were major contributors to product development and subsequent growth and success at Percussion Software, Bond Technologies and Stride & Associates. Since introduced, NeXpose has been sold to corporate enterprises, Global 2000 companies, and government entities, and serves the full range of vertical markets across the U.S. and abroad. In addition, Rapid7 provides compliance products and services for PCI, HIPAA and Sarbanes Oxley. Rapid7 is headquartered in Boston, MA, with offices in California and the United Kingdom. For more information on the company and its product, NeXpose, visit www.rapid7.com.