Drawbridge
A Single Pane of Glass for Managing and Simplifying Cybersecurity

The most significant force impacting vulnerability management today is the broad shift to remote and hybrid work. In the past, an organization could secure its perimeter and rest relatively assured that they were fairly well protected. With BYOD programs, an increasingly mobile workforce, and a growing number of hackers and attacks, these new, “perimeter-less” environments leave organizations exposed to outside threats.

That’s where Drawbridge can help.

Founded in 2018 to help financial services firms, Drawbridge’s platform is designed as a “single pane of glass” for managing and simplifying cybersecurity programs. Rather than assembling numerous point solutions to address key aspects of a robust cybersecurity platform, Drawbridge offers a range of services through its tandem software services approach.

“We launched the business in 2018 and have been developing and refining our software since then,” says Simon Eyre, the Managing Director and Chief Information Security Officer of Drawbridge. “Earlier this year, we onboarded a new Global Head of Software Development, Bill Waters, to oversee development.”

Clients using Drawbridge’s range of products and services are able to create, manage, and optimize cybersecurity programs that meet—or exceed— regulatory requirements. They are able to detect vulnerabilities and bring down their overall cyber risk through intelligent scanning, reports, and intuitive dashboards, all complemented by the company’s expert services teams.

Drawbridge’s approach to vulnerability management includes two overarching priorities: protecting the corporate network, servers, and devices within the physical space of the office; and protecting the corporate network and devices when connected from outside networks. The newer part of this strategy covers these devices off the corporate network. Using a lightweight, software-based agent installed directly on Windows desktops and laptops, Drawbridge is able to gather continuous vulnerability data on covered devices. This complements the network-based scanning via the installation of a Drawbridge hardware scanner within a client’s network footprint.

Together, this two-pronged approach powers a unique continuous vulnerability management system that takes the point-in-time lessons of, for example, penetration tests and brings them much closer to real-time.

Drawbridge is always looking for new ways to assist its clients, both in the realm of vulnerability management and within other areas of cybersecurity program management. For example, earlier this year, the company released a new dark web scanning module to its core SaaS platform that scans the dark web for compromised credentials.

We believe that prevention is at least as important as an organization’s response to cyber attacks, and perhaps even more so. This is why our software focuses on elevating the practices of the important aspects of cybersecurity programs and empowering our clients to identify and mitigate risks continuously

To increase its software and product capabilities, Drawbridge is investing significantly in making workflows more intuitive and streamlined for both its internal users and clients. At the same time, the company is simplifying and automating its suite of offerings to enable clients and their service teams to focus on issues and exceptions.

Drawbridge believes that cybersecurity is a strategic asset. Responding to incidents is a vital part of the picture, and there is no substitute for having battle-tested plans and procedures in place (and a good cyber insurance policy). One of the company’s guiding principles is that point-in-time assessments are valuable but insufficient on their own. So they focus on developing software and services that power continuous vulnerability management, ongoing management, and remediation of first and third-party risks, and visibility and transparency through the powerful combination of its SaaS platform and knowledgeable, experienced cybersecurity professionals.

“We believe that prevention is at least as important as an organization’s response to cyber attacks, and perhaps even more so,” mentions Eyre. “This is why our software focuses on elevating the practices of the important aspects of cybersecurity programs and empowering our clients to identify and mitigate risks continuously.”