StillSecure Upgrade Digs Deeper Into Network Security

StillSecureVAM 5.0 is designed to deliver vulnerability management to a host of core IT systems, including asset inventory, trouble ticketing and change management, according to the Louisville, Colo.-based network security software vendor. The upgrade also integrates vulnerability management with the new VAM Integration Framework, a collection of open application programming interfaces (APIs) that allow data import/export, workflow control and object manipulation in VAM's database.

"Vulnerability management no longer needs to be an isolated security process that resides on the fringe of mainstream IT," StillSecure CTO Mitchell Ashley said. "The results are tighter security, comprehensive vulnerability tracking and management, and an overall improvement in IT efficiency and productivity."

VAM 5.0 serves as a command center that provides a single, integrated view of all vulnerability data, including VAM-generated data as well as data from third-party scanning tools and other external systems, Ashley said. IDS/IPS events, firewall logs and other security data also can be integrated, he said.

Those features, along with added support for Mozilla Firefox 0.9.3 and Mozilla 1.7, piqued solution providers' interest in the product.

"Because the new VAM 5.0 integrates into other core IT systems, partners now have an opportunity to sell multiple solutions to customers," said Rick Lepow, president of CCIT, an Arlington Heights, Ill.-based solution provider. "I can't wait to make some money off this."

VAM works as part of a larger solution, too, according to Michael Pearson, CEO of DigitalStakeout. He said the Atlanta-based solution provider has integrated the technology into a threat portal called VMS.

"VAM is the core of our portal," Pearson said. "It really is an enterprise-class system that is affordable to SMBs."

StillSecure VAM 5.0 is slated to become available to solution providers this week. Pricing will be based on an annual subscription of purchase-plus-maintenance that includes product upgrades, rule updates and engineer-delivered customer support.