The Anti-Impersonation Company. Date: May 2 nd, ValiMail. All Rights Reserved. Confidential and Proprietary.

Transcription

1

2 The Anti-Impersonation Company Date: May 2 nd, 2017

3 I need you, but I don t trust you 3

4 90%+ of cyber attacks start with a phish 4

5 Anyone can send in your name Your Company 3 rd -Party Senders (10,000++) Impersonators Authorized Senders Shadow Phish From: YourCompany.com Employees, Customers, Partners Most organizations neither see nor control who sends on their behalf 5

6 Authentication has reached an inflection point SENDERS RECEIVERS & SEGs >2.7 billion inboxes covered by DMARC Source: Farsight (Note: Google reports over 500K domains with DMARC) March FTC recommends DMARC Unfortunately, adoption does not mean success 6

7 ~70% of DMARC implementations fail, for any company size Company Size Attempted Authentication Failure Rate NASDAQ 100 FTSE 100 S&P 500 Fortune 1000 Alexa 10,000 Alexa 100,000 Alexa 1 million 43.0% 25.0% 23.8% 16.2% 14.2% 5.9% 2.3% 72.1% 80.0% 74.4% 76.5% 62.3% 71.1% 74.6% Source: ValiMail Failure = no enforcement/unprotected 7

8 Even the big security players get it wrong 8

9 Authentication at CSO50 20% have tried, with a 75% failure rate Industry Sample Size Attempted Successful Enforcement Of Attempted, success rate All (19%) 12 (5%) 25% Finance (33%) 5 (13%) 39% Media/Tech (28%) 4 (6%) 21% Retail/Industrial 49 7 (14%) 2 (4%) 29% Gov t/edu 47 5 (11%) 0 (0%) 0% Healthcare 46 4 (8%) 1 (2%) 25% Source: ValiMail 9

10 What keeps companies from enforcing authentication? IT S HARD TO GET RIGHT MISTAKES ARE VERY COSTLY Auto-identifying & configuring sending services is hard Standards are brittle, restrictive & unforgiving X Ongoing changes to cloud services require active monitoring & updates Dozens-hundreds of DNS changes manual, slow, painful and dangerous Legitimate from your domain is quarantined or blocked 10

11 Industry evolution APPROACH DIY CONSULTANTS Authentication as a Service (EAaaS) WHAT YOU PAY $ + $$ $$$ + $$ $$ WHAT YOU GET REPORTS & RECOMMENDATIONS MORE REPORTS & CONSULTING FULLY AUTOMATED, CLOUD-BASED SERVICE WHAT YOU DO IDENTIFY SENDERS, RECONFIGURE DNS SKIRT LIMITATIONS IDENTIFY SENDERS, RECONFIGURE DNS SKIRT LIMITATIONS CLICK ENFORCEMENT (SUCCESS) RATE <30% after 12 months <40% after 9 months >90% after 3 months Get to enforcement fast, and stay there Manual effort becomes automated over time 11

12 ValiMail invented Authentication as a Service Anti-Impersonation: Customers include: Completely stops impersonation attacks (#1 phishing attack vector) Fully automated cloud solution with 1-click control Complete visibility & control over shadow services Mission-critical infrastructure vs consulting services 12

13 A services-driven approach and automated cloud infrastructure are game-changers Existing Process 1. Identify all services 2. Find SPF & DKIM configurations 3. Log into DNS console 4. Update DNS TXT records 5. ERROR! SPF over 10 lookup limit 6. Wait 24 hours: what s broken? 7. Fix newly identified services Identifies shadow services Enables or blocks senders with one click Eliminates need to reconfigure or touch DNS Fixes standards limitations 8. Monitor, Repeat ValiMail goes beyond configuration with a service that Just Works" 13

14 Customers and partners are seeing great results Visibility and control while detecting and blocking phishing attacks incredible! Chris Cravens Head of Technology Services Allowed me to see and manage my services, while preventing phishing attacks. Steve Fridakis CISO Quickly & efficiently provided us with visibility and control of our services. Chris Porter CISO Officially coolest thing since sliced bread. Nomi Conway Product Manager, Risk & Security Setup, configuration, and on-going maintenance of SPF, DKIM, and DMARC records can be so challenging, ValiMail addresses the limitations of these standards through unique technology all from an intuitive interface. Microsoft Field Note to Global Sales 14

15 Our CISOs see value across the enterprise 15

16 Demand more than reports & configs Sender Database (>10K services) Real-time map of sending services & configuration requirements ValiMail EAaaS Cloud SPF DMARC DKIM Purpose-Built DNS Cloud (>10M queries/day) Hosts & serves only the DMARC/DKIM/SPF portion of your DNS Dynamically generates perfect SPF records for every request Services Management Portal (One click) Instantly updates enforcement for services sending in your name (without touching DNS) A dynamic, 24x7x365, services-driven authentication infrastructure 16

17 Are you being phished right now? Complementary visibility report Find out who s sending on your behalf (legitimate and malicious) Who s impersonating you? What shadow services are sending as you? No cost, no risk, no change to flow, no exposure of PII Check your domain at: Protect your employees, customers, partners, prospects, and brand 17