MITRE Engenuity ATT&CK Evaluations: Enterprise is an annual evaluation that holds significant value for cybersecurity leaders and their teams as they seek to assess vendors’ abilities to protect their organizations from increasingly sophisticated threats. This evaluation, considered one of the most trustworthy in the industry, provides objective input to help assess cybersecurity vendors in addition to other evaluation methods such as vendor reference checks and live trials.
The MITRE Engenuity ATT&CK Evaluation is conducted by MITRE Engenuity and simulates attack sequences based on real-life approaches taken by advanced persistent threat (APT) groups. This year, the evaluation tested 29 vendor solutions by emulating the attack sequences of Turla, a sophisticated Russia-based threat group known to have infected victims in over 45 countries. It is important to note that MITRE does not rank or score vendor results. Instead, the raw test data is published, and buyers use this data to evaluate vendors based on their organization’s unique priorities and needs.
In interpreting the results of the MITRE Engenuity ATT&CK Evaluations: Enterprise, it is essential to consider that the results are not presented in a traditional format that many individuals are accustomed to. Independent researchers often declare “winners” to simplify the process, but identifying the “best” vendor is subjective. However, the results provide valuable insights into how participating vendors performed against Turla’s attack sequences.
Cynet, an all-in-one security solution, emerged as a top performer in the evaluation, delivering 100% detection, visibility, analytic coverage, and real-time detections without configuration changes. This performance outperformed the majority of vendors in several key areas, illustrating the solution’s ability to detect threats and provide actionable detections without missed or poor quality detections.
The evaluation revealed that Cynet’s all-in-one security solution excelled in detecting threats and providing the necessary context to make the detections actionable. It achieved 100% visibility and perfectly detected all 143 attack steps without configuration changes, outperforming larger, well-known security companies. Additionally, Cynet provided analytic coverage for 100% of the attack steps without configuration changes, showcasing its effectiveness in identifying important general, tactic, or technique information.
To further delve into the MITRE ATT&CK results and gain expert advice for cybersecurity leaders, Cynet CTO Aviad Hasnis and ISMG SVP Editorial Tom Field hosted an on-demand webinar. The webinar aimed to help cybersecurity leaders find the vendor that best fits the specific needs of their organization and provided insights into Cynet’s performance during the evaluation.
In conclusion, the MITRE Engenuity ATT&CK Evaluations: Enterprise serves as a valuable and comprehensive assessment of how competing security solutions perform in real-world attack scenarios. Cynet’s exemplary performance in the evaluation highlights its capability to address the evolving cybersecurity threats and reaffirms its position as a leading all-in-one security solution.