Focused on reducing identity risk, the company sees FedRAMP® High Authorization of its flagship product as a win for government agencies
SpecterOps, a provider of adversary-focused cybersecurity solutions born out of unique insights of advanced threat actor tradecraft, today announced they have received their FedRAMP® High Authorization for BloodHound Enterprise (BHE). BHE is an Attack Path Management (APM) security solution for defending Microsoft Active Directory (AD) and Azure AD/Entra ID. This certification was streamlined through a partnership with Palantir FedStart.
“Many of us at SpecterOps come from a federal service background and we’ve seen firsthand how difficult it is to solve the problem of identity attack paths in the public sector,” said Justin Kohler, VP of Products at SpecterOps. “Bringing Identity Attack Path Management to FedRAMP High environments has been a goal of ours for years and we’re proud to say we’ve done it.”
Identity Attack Paths are a pervasive issue at government agencies and are regularly abused by nation-state adversaries. Identity Attack Path Management empowers government identity and security teams with continuous prioritization, remediation guidance and verification, and reporting to show improvements to their mission over time in identity and directory environments. BloodHound Enterprise reduces the risk of lateral movement and privilege escalation in Active Directory, Entra ID and hybrid Azure environments and provides Optimal Visibility, Analytics, and Risk Assessment maturity for implementing Zero Trust for Identities.
“We are very excited to have achieved the uplift of our products from the Moderate to the High baseline,” said Akash Jain, President, USG at Palantir Technologies. “We are thrilled that both FedStart and the partner applications that utilize it, such as BloodHound Enterprise, can now claim full FedRAMP High Authorization.”
BHE is deployed as an application on top of the FedStart platform to comply with and inherit security controls that FedRAMP requires. The Authorized designation enables Federal agencies that require a High authorization level to utilize BloodHound Enterprise at scale to enhance their mission in protecting high-value assets. This includes most Controlled Unclassified Information (CUI), including PII and PHI, unless otherwise classified or marked.
CISA and Microsoft have recommended BloodHound, an open-source tool from SpecterOps related to BloodHound Enterprise. In Q3 2024, BHE product revenue grew by more than 100% y-o-y, and overall, the company grew significantly over the same period with employee headcount expanding 35% in the last 12 months. SpecterOps has also enabled hundreds of organizations to develop security operations programs, providing adversarial training to thousands of students in advanced adversary Tactics, Techniques and Procedures (TTPs).
Explore AITechPark for the latest advancements in AI, IOT, Cybersecurity, AITech News, and insightful updates from industry experts!
