Core Network Insight is an automated breach defense system that empowers security teams to identify infected devices with certainty, address threats faster by prioritizing high-risk devices, and block active infections. It monitors network traffic to automatically discover advanced threats, verify which devices have been breached, and assign a risk level to each infected device in order to contain threats instead of simply chasing alerts. Network Insight uses multiple techniques over time, such as understanding network behavior and applying threat intelligence, to produce actionable intelligence on breaches with more certainty than relying on any single detection method.

1. Core Network Insight
empowers security teams to:
• Identify infected devices
with certainty
• Address threats faster
• Prioritize remediation based on
the highest risk devices
• Block active infections until they
can be addressed
• Adapt their security posture
to prevent adversaries from
successful future attacks
Core Security has broad and
deep threat visibility:
• Protect over 400 million
enterprise devices worldwide
• View nearly 50% of North
American Internet and
mobile traffic
• Database increases by 22 billion
records per day
Detect, Respond & Recover Rapidly
Today’s threats evolve constantly. Prevention tools, like anti-virus, firewalls, IDS/IPS,
and sandboxes, can’t stop infections they haven’t seen before. Core Network Insight
is different. It fills the gap between failed prevention and your incident response.
Core Network Insight is an automatic breach defense system that detects breaches
with certainty and gives responders the ammunition needed to rapidly prevent loss.
Network Insight delivers actionable information about known and unknown threats
regardless of the infection’s source, entry vector or the OS of the device. It arms
responders with definitive evidence so they can rapidly prevent loss on high-risk
devices while blocking activity on the rest.
Automatically Discover Advanced Threats
Threat actors always have the first move, especially if they target your organization.
Core Network Insight automatically discovers advanced threats and contains them by:
• Monitoring network traffic for threat behaviors and activities
• Automatically verifying which devices have been breached
• Assigning a risk level for each infected devices
Contain Threats Instead Of Chasing Alerts
Prevention devices are a necessary first layer of protection. When they fail—and they
will—Core Network Insight discovers infected devices that have eluded preventative
controls. Instead of relying on any single detection technique, Network Insight
discovers breaches with certainty by:
• Understanding the network behavior of the device
• And applying Core Security’s intelligence about malicious destinations, command
and control communications and threat actors
Core Network Insight:
Automated Breach Defense
“One hundred percent of the machines that [Core Network
Insight] has identified as infected have in fact been infected.”
– Global family entertainment enterprise
“In order to stop today’s advanced threats, first you have to
detect them. Our traditional security controls weren’t doing
that. That’s where [Core Security] comes in.”
– Fortune 500 entertainment company

2. Instead of relying on any one technique or a snapshot in time,
Core Network Insight operates in real-time and gathers evidence
over time. Network Insight produces actionable intelligence using
multiple techniques:
“[Core Network Insight] is an important
tool in an organization’s incident response
efforts. You can’t respond to what you don’t
see. [Core Security] both accurately detects
malicious activity and enables us to respond
effectively.”
– CISO at the University of Tampa
Copyright © 1996-2016 by Core Security Corporation. All Rights Reserved. The following are trademarks of Core Security Corporation “Core Impact”, “Core
Vulnerability Insight”, “Core Password”, “Core Access”, “Core Provisioning”, “Core Compliance”, “Core Access Insight”, “Core Mobile Reset”, and “Think Like an
Attacker”. The following are registered trademarks of Core Security Corporation “WebVerify”, “CloudInspect”, “Core Insight”, and “Core Security”. The names of
actual companies and products mentioned herein may be the trademarks of their respective owners. The names of additional products may be trademarks or
registered trademarks of their respective owners.
ABOUT CORE SECURITY
Core Security provides market-leading, threat-aware, identity, access and vulnerability management solutions that provide actionable
intelligence and context needed to manage security risks across the enterprise. Solutions include multi-factor authentication,
provisioning, Identity Governance and Administration (IGA), Identity and Access Intelligence (IAI), and Vulnerability Management
(VM). The combination of these solutions provides context and shared intelligence through analytics, giving customers a more
comprehensive view of their security posture so they can make better security remediation decisions and maintain compliance
Core Security is headquartered in the USA with offices and operations in South America, Europe, Middle East and Asia. To learn more,
contact Core Security at (678) 304-4500 or info@coresecurity.com.
blog.coresecurity.com | p: (678) 304-4500 | info@coresecurity.com | www.coresecurity.com