04/26/2023
PKI Solutions Introduces New Features in PKI Spotlight to Address CISOs' workload, Mitigate Risks, & Worry
PKI Spotlight helps CISOs secure digital assets, stay compliant, save money, and worry less
PORTLAND, Ore., March 9, 2023 — PKI Solutions has announced the latest release of PKI Spotlight, a Public Key Infrastructure monitoring and alerting solution designed to address specific, ongoing tasks that CISOs are responsible for in the current cybersecurity landscape. With the upcoming cybersecurity bill from the SEC and other regulatory bodies and increasingly complex IT requirements, CISOs are facing new emerging threats to PKI environments, cybercrime insurance requirements, and a shrinking talent pool. PKI Spotlight aims to help CISOs secure the enterprise and customer data against exploitable PKI misconfigurations and vulnerabilities, extend visibility into non-Microsoft PKIs, and scale PKI expertise.
“By employing PKI Spotlight companies can save at least $185k in salary per year,” said Mark B. Cooper, president and founder, PKI Solutions. “We compliment your in-house PKI expertise and skillset with a 24/7 ‘employee’ whose sole task is to monitor your PKI environment. Leveraging the nominal cost of PKI Spotlight is just like having an expert gatekeeper on staff, who never sleeps.”
PKI Solutions is excited to announce the latest enhancements to PKI Spotlight, the first Public Key Infrastructure management solution built from the ground up for real-time monitoring and alerting of the availability, configuration, and security of all your PKI and HSM environments, Microsoftt and non-Microsoft.
This release of PKI Spotlight introduces the following capabilities:
• SIEM Integration with Splunk: This feature allows CISOs to easily integrate PKI Spotlight with their Splunk SIEM solution, providing a consolidated view of PKI events and alerts alongside other security data, helping to streamline incident response and improve security posture.
• Detection of Certified Pre-Owned Vulnerabilities: This feature enables PKI Spotlight to identify and mitigate PKI vulnerabilities which were documented by SpecterOps in the “Certified Pre-Owned Active Directory” white paper. As this document is leveraged by both pe*******on testers and malicious actors, detecting and mitigating these specific vulnerabilities is paramount to keep an organization’s PKI secure, compliant and audit-safe.
• Detection of Strong Name / OID: This feature enables PKI Spotlight to identify PKI misconfigurations that would result in the issuance of client authentication certificates that do not comply with Microsoft “KB5014754 – Certificate-based authentication changes on Windows domain controllers”. Such certificates may not be used for authentication to Microsoft Active Directory resources. Ensuring certificates cannot be issued in this state mitigates the risk of service disruptions.
• Detection of High Value Certs: This feature enables PKI Spotlight to trigger an event upon the issuance of digital certificates that have a higher level of risk or value (such as Code Signing and Wildcard-named certificates), giving organizations the ability to react in real-time to revoke such certificates which were issued maliciously or in error.
• Detection of Unknown OCSP: This feature enables PKI Spotlight to give organizations confidence that their Online Certificate Status Protocol (OCSP) environments are configured to not only recognize if a certificate is revoke but whether or not the CA actually issued the certificate being queried by the reliant party.
Industry Experts Agree
“With PKI Solutions, we get the best-in-class PKI expertise. PKI Spotlight is an important addition to our portfolio of products and gives us productivity gains together with peace of mind that our PKI systems are available and functional, and any service that relies on our PKI is operating smoothly and securely,” said Scott Fales, principal network engineer at BayPort Credit Union. “We expect our reliance on our PKI environment to increase over time and having a product like PKI Spotlight means that we can reliably execute on initiatives that continue to improve our security posture.”
According to Roger A. Grimes, 34-year cybersecurity consultant and author of 13 books and more than 1,200 magazine articles on computer security, the time has come for a product like PKI Spotlight. “Whether you have one PKI server or dozens, you should get PKI Spotlight. It’s what Microsoft should have created 20 years ago,” said Grimes. “Once you see what it does it seems so obvious why you absolutely need it.”
Making CISOs Look Good and Sleep Better
1. Unparalleled visibility and control over PKI environment: With PKI Spotlight, CISOs can monitor and manage their PKI environment in real-time. This visibility allows them to detect and respond to potential issues before they can cause harm. This capability makes CISOs confident in the security of their digital assets.
2. Cost-effective solution: PKI Spotlight can save CISOs at least $185k in salary per year, in addition to a worry-free nights. By employing PKI Spotlight, companies can have a 24/7 ‘employee’ whose sole task is to monitor the PKI environment, like having an expert gatekeeper on staff who never sleeps. This cost-effective solution provides CISOs with the expertise they need without the high cost of hiring additional personnel.
3. Compliance with industry regulations and standards: PKI Spotlight helps organizations stay compliant with industry regulations and standards, reducing the risk of data breaches and audit findings. The features of PKI Spotlight such as detection of Certified Pre-Owned Vulnerabilities and Detection of High-Value Certs ensure that CISOs can identify and mitigate potential vulnerabilities related to PKI and digital certificates, making them compliant with industry regulations.
4. Scalability and expertise: PKI Spotlight is built to scale with the growing needs of the organization. It also provides the necessary expertise in managing and monitoring the PKI environment, making CISOs confident in the security of their systems.
About PKI Solutions
PKI Solutions offers Public Key Infrastructure (PKI) products, services, and training to help ensure the security of organizations now and in the future. With deep knowledge and experience in all things PKI, PKI Solutions has developed the industry’s first and only solution that provides real-time monitoring and alerting of the availability, configuration, and security of all of organizations’ PKI environments – all consolidated into one easy-to-use dashboard.
# # #
Media contact:
Joshua Sommer
PKI Solutions
[email protected]
