Secure access and data protection
Secure access to the web, cloud and applications, with data protection policies.
SSE · SASE
Example vendorNetskope
Integrations · Unified visibility · Continuity
Your tools, connected.
The context your
operation needs.
Cloudfence connects security layers — access, exposure, risk, applications, endpoints and networks — to bring information together in CloudMDR. Your team gains a unified view and support to maintain integrations and work with alerts.
Attack surface and exposure validation
Asset discovery, security testing and vulnerability validation to support prioritization.
Attack surface management · Pentest
Example vendorEthiack
Third-party risk and security posture
Monitoring external posture and supplier risk to broaden visibility into your environment.
Third-party risk · Security ratings
Example vendorUpGuard
Application and API security
Protection for web application and API traffic, with alerts and events for security operations.
WAF · Application security
Example vendorCloudflare
Endpoint monitoring and protection
Device security information, events, antivirus, and detection and response solutions.
SIEM / XDR · Antivirus · EDR
Example solutionsWazuh · Microsoft Defender Antivirus
Network security and firewalls
Network and firewall events in a unified view, using managed or existing solutions.
Firewall · Network security
Example solutions and vendorsOPNsense · Fortinet FortiGate · SonicWall · Sophos
Vendors and solutions are examples within each category. Integration design considers the technologies and interfaces available in your environment.
SUPPORT THAT FOLLOWS YOUR OPERATIONConnecting is the start.
Connecting is the start.
Maintaining it is part of the journey.
The Wazuh support and maintenance subscription includes CloudMDR. Support for integrations, alerts and playbooks is defined in the scope to help your team maintain operational continuity.
Have tools that need to work together?
Let’s design the integration for your environment.
Playbooks for alerts and incidents
From alert to next step.
With a defined path.
Playbooks establish what to check, whom to contact and what actions to take in specific scenarios. Your team follows a process aligned with the environment, responsibilities and required approvals.
ILLUSTRATIVE EXAMPLE
Suspicious access alert
An alert arrives from an integrated tool. The playbook helps the responsible team validate the context and determine the response.
Owner: internal team or Cloudfence SOC- 01
Validate the context
Gather evidence and check the user, asset and activity involved.
- 02
Determine the response
Assess impact and follow the defined action or escalation criteria.
- 03
Engage the owner
Escalate or carry out authorized actions according to each team’s role.
- 04
Record and follow up
Document the decision, follow the incident and review the playbook when needed.
Playbooks are tailored to the customer. Manual actions and automation follow the rules and approvals agreed for the operation.
Frequently asked questions
Before you get started.
Which solution categories can contribute to the unified view?
Secure access and data protection; attack surface and exposure validation; third-party risk; application and API security; endpoint monitoring and protection; and network security. Netskope, Ethiack, UpGuard and Cloudflare are examples in the first categories. Wazuh, antivirus, EDRs and firewalls can also be integrated according to available technologies and interfaces.
How do playbooks help my team?
They define checks, owners, escalation criteria and planned actions for specific alerts and incidents. The process is tailored to the environment and agreed approvals, guiding your internal team or the Cloudfence SOC.
Can I use my existing commercial technology investments?
Yes. You can combine open-source components and existing commercial solutions. Integration is designed for the available technologies, versions and interfaces, focusing on a unified view of the environment.