Insight launches security service against AI threats

IT company Insight is launching Insight Managed Exposure Defence, a new security service that helps businesses protect themselves against the growing wave of security threats created by AI models. The service enables companies to quickly move from exposed to protected IT environments without lengthy procurement processes or fragmented supplier relationships. 

Tools for exploiting security vulnerabilities using AI have shortened the window between a published vulnerability and an active attack from days to hours. Most Swedish companies lack the processes and infrastructure required to manage security updates at this pace. For mid-sized companies, the challenge is even greater: they face the same threat landscape as large companies but have more limited resources for security, automation and technology.

– This is not a threat you have months to plan for. Most security teams cannot handle a patch wave across operating systems, browsers, and software libraries. Insight Managed Exposure Defence is built for exactly this – to take on the operational burden that most companies cannot bear themselves and protect the production environment and keep the SOC team running, says Sandra Simms, Sweden Manager at Insight. 

The service is based on five integrated functions:

Continuous threat exposure management: Continuous scanning of devices, cloud environments, identities and applications that provides a risk exposure map ranked by risk. Prioritization is based on actual business risk and not solely on so-called CVE scores (which identify and catalog security vulnerabilities in software and hardware). 

Patch management: Patching for large enterprises with a wide range of operating systems including Windows, Linux, UNIX, Apple iOS, as well as network operating systems such as Palo Alto PANOS and Cisco IOS, as well as the database layer. Deployment is done with change management, test environments and built-in recovery capabilities so that companies can respond at the speed of the threat.

Risks in the software supply chain and open source: Software Bill of Materials (SBOM) generation, ongoing monitoring of open source code, provenance tracking from development to operations in line with CNAPP (integrating cloud security tools), and vendor contract review including liability clauses and scenarios specific to AI, empowering companies to contractually address supply chain challenges.

External developer capacity: Global teams of developers providing capabilities for dependency upgrades, library refactoring, and native application remediation, enabling code-level risk exposure to be closed without hindering product development.

Managed XDR: 24/7 detection, analysis and incident management from a global security center with operations in the US, UK, India and Manila. It is a safety net for those times when a patch does not arrive in time.

The service is compliant with regulations such as GDPR, NIS2 Directive, DORA, EU AI Regulation, UK GDPR and Cyber Resilience Regulation. Insight's own IT environment is protected by the same features included in Insight Managed Exposure Defence.

The service is available now. Read more here.