RapidFire Security Breach Detection Tool Finds Threats That May Be Well-Hidden

RapidFire Tools unveiled a breach detection tool that looks for trace evidence that a system has been breached and for where it has footholds.

The Atlanta-based vendor—which was acquired earlier this year by Kaseya—added the Advanced Breach Detection System to its Cyber Hawk insider threat detection offering, the company said.

“Advanced Breach Detection plays a vital role even with anti-virus deployed,” Win Pham, vice president and head of development at RapidFire Tools, told CRN. “Anti-virus software primarily focuses on malware and on stopping imminent threats. Anti-virus may not be sufficient once a hacker has penetrated a system, leaving behind well-hidden and often dormant ‘footholds.’”

These cyber “footholds” lie dormant on the network and are timed to eventually provide hackers with access to systems they’ve infiltrated or to deploy malicious actions, according to the company. Some take as long as six months to actuate and result in a system being compromised, RapidFire said.

Richard Delaney, president of New York-based MSP Delaney Computer Services, said he uses RapidFire Tools to help with IT assessments and has had good success with identifying network vulnerabilities. He said MSPs now will benefit from the ability to scan and identify latent threats on their customers’ and potential customers’ networks without the need for additional hardware.

“It’s an interesting idea,” he said. “I like the idea of having a lightweight application like this to use during a sales engagement to show potential clients that their networks may not be as safe as they may think. Since the price is relatively reasonable, it could be a useful tool to add into our utility belt of solutions for ongoing security-as-a-service engagements as well.”

RapidFire said its new Advanced Breach Detection technology scans for a wide range of malicious activity and notifies the MSP via email or direct PSA integration about anything suspicious. The alert content can also be viewed and managed through the RapidFire Tools online portal, the company said.

The Cyber Hawk Advanced Breach Detection System add-on is offered in two options: Cyber Hawk Basic Breach Detection is available at no additional cost to existing RapidFire Tools Cyber Hawk customers. It can be immediately activated with a single click, the company said. For an additional $50 per customer site, Cyber Hawk Advanced Breach Detection conducts daily scans and delivers specific information about the detected issue, including the exact location and affected files, making it easier for the MSP to remediate, RapidFire said in a statement.