McAfee To Boost SIEM Capabilities With NitroSecurity Buy


McAfee plans to acquire security information and event management (SIEM) player NitroSecurity, a move the company said will boost the SIEM capabilities in McAfee's Security Connected Framework.

Portsmouth, N.H.-based NitroSecurity is a top provider in the SIEM market and offers wares that provide visibility and situational awareness to protect information and infrastructure. NitroSecurity's solution can identify, correlate and remedy threats in minutes instead of hours for fast risk mitigation, both companies said. The financial terms of the acquisition were not disclosed.

According to Santa Clara, Calif.-based McAfee, once the acquisition is completed, McAfee will wrap NitroSecurity's technologies into its own security management offerings. McAfee said the addition of NitroSecurity's technologies will better help organizations get visibility into their enterprise endpoint assets, network infrastructure, security threats and risks, and system vulnerabilities. McAfee said enterprise customers can leverage that information in a single management console to swiftly assess their risk profile and security posture, and to rapidly analyze and take corrective actions, like issuing new configurations, implementing new policies and deploying software updates.

"McAfee is focused on keeping its customers safe with optimized security and risk management solutions," Stuart McClure, general manager and senior vice president of the Risk and Compliance business unit at McAfee, said in a statement. "McAfee has taken another significant step toward this goal with the proposed acquisition of NitroSecurity. With NitroSecurity's technology and talent, McAfee can expand its reach into new markets, secure new platforms and strengthen its hold as the leader in the security risk management market."

McAfee, which was acquired by Intel last year, plans to leverage NitroSecurity's SIEM capabilities in several ways. First, the company said NitroSecurity's SIEM leadership will help it expand its Risk and Compliance and Global Threat Intelligence capabilities. The NitroSecurity acquisition will also enable McAfee to leverage NitroSecurity's SIEM management, which already integrates with McAfee ePolicy Orchestrator (ePO), and can be used to give users a single security platform for event analysis and management. Adding NitroSecurity SIEM management to ePO adds the ability to view events, activity and logs created by networks, databases and applications, McAfee said. And the McAfee ePO platform will also be able to leverage the increased SIEM capabilities to add a range of monitoring and mitigation actions, including issuing new configurations, implementing new policies and deploying more recent software updates.

"As a long-standing McAfee Security Innovation Alliance partner, we know that NitroSecurity's technology can provide the McAfee customer base with the highest level of security and compliance across their IT environment," Ken Levine, NitroSecurity chairman and CEO said in a statement. "NitroSecurity's technology supports a broad range of information sources, including network security devices, firewalls, operating system and application logs, vulnerability assessment scans, identity and access management systems, and privacy systems. It will complement the extensive McAfee security portfolio and help to meet the demanding compliance and protection needs of our joint customers."

McAfee said it plans to incorporate NitroSecurity's team into the McAfee Risk and Compliance business unit. The acquisition is expected to close in the fourth quarter of this year.