Synack builds intel platform for its penetration testers

Hydra will help Synack's analysts quickly find exploit vectors during penetration tests

Synack, a security company that uses crowdsourcing for penetration testing, has built an intelligence platform that it says will narrow down weak points in a company's network.

Based in Redwood City, California, Synack uses a network of freelance security analysts in 35 countries to probe the networks of companies who've signed up to its subscription service.

The analysts, who are closely vetted by Synack, get paid based on the vulnerabilities and security problems they find, ranging from $100 up to thousands. The subscription offering means companies are continually analyzed.

Jay Kaplan, Synack's co-founder and CEO, said they wanted to build platform that would help its analysts quickly focus their attention on potential trouble spots. Called Hydra, the platform spots vulnerabilities in networks and applications, looks for out-of-date software and other issues.

Previously, analysts had a very open-ended approach when given a project and used their own methodologies. It was largely up to the analysts to decide what to look at.

But large, complicated works can have lots of places to look for problems. Hydra decreases "the amount of time it take to find these exploit vectors," Kaplan said.

Synack's researchers don't work from inside companies but instead act like attackers, looking at externally-facing IP addresses and applications.

"If someone from the outside was trying to break in or trying to steal information from an organization, these are the areas they'd look at first," Kaplan said.

For analysts using Hydra, it could potentially make them more money since they can spend more time looking at areas where there could be problems. If Hydra finds something, the alerts are sent to the researcher, who can then perform a more manual investigation.

Synack plans to add modules that address mobile devices and web applications over the next few months, Kaplan said. For mobile, Hydra will look at a variety of things, from insecure cryptography to embedded passwords and keys. 

Kaplan said his company, founded about three years ago, has taken many cues from how the NSA conducts its vulnerability research. He worked at the spy agency for four years as a senior cyber analyst on offensive cyber operations.

"You can definitely draw a parallel to the way the NSA conducts business on the intel side" Kaplan said. "They very regularly leverage technology for scale --  that's scale on a whole other level -- but they also have a cyber operations workforce that is responsible for intelligence purposes."

The first phase of Hydra has been pushed to Synack's researchers, and it will go live today, Kaplan said.

Join the Good Gear Guide newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Jeremy Kirk

IDG News Service
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Armand Abogado

HP OfficeJet 250 Mobile Printer

Wireless printing from my iPhone was also a handy feature, the whole experience was quick and seamless with no setup requirements - accessed through the default iOS printing menu options.

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?