We use XM Cyber to define scenarios we are most worried about, including all the external entry points to our critical assets.
One of the main use cases I set up with XM Cyber is for internet-exposed assets to our domain controllers, which allows us to quantify the risk and prioritize our remediation.
We also use XM Cyber to determine lateral movement in a hybrid cloud, between the cloud and our on-premises.
XM Cyber allows us to quantify the risk, and we are able to track remediation, so we can quantify the risk at an executive level and also to a technical IT team.
We take the EMS service, and on a monthly basis, we have an executive report and also a technical report to present the risk at both the executive and technical level.
There is a very interesting feature about cross-graph concerning lateral movement and also about choke points, which allows us to focus on what matters the most.
Since implementing XM Cyber, we have improved the way we are doing patching, focusing on the choke points in our patching cycle, and it improves the way we assess the risk.
This focus on choke points and risk assessment has resulted in faster patching cadence, especially on the choke points, leading to a reduction of the risk, which is what we're looking for from this solution.
There are many interesting things about XM Cyber, but the part that can be improved is the mobile exposure and the IBM i specific equipment.
I have been using XM Cyber for two years.
Its scalability is great; it's easy to deploy and fully scalable.
The customer support was great, with particular attention to answering our questions.
I did not use any other tool before XM Cyber.
My experience with pricing, setup cost, and licensing for XM Cyber was fine. We found great value in the tool, so we are ready to pay the license.
We have seen a return on investment through the quantification of the risk and tracking those risks to our management by following the security score of all the scenarios we have built, as well as tracking the remediation of choke points.
Before choosing XM Cyber, we launched an RFP and assessed Simulate and Pentera.
I would rate XM Cyber a nine out of ten.
If others are looking for an easy solution that allows them to visualize attack paths on what really matters, I would recommend XM Cyber.
I want to say that I'm more than happy to work with XM Cyber, and it's a great value for a company.