A Look Back At Our Product in 2023

2023 at Lumu: Pioneering advancements in AI-driven cybersecurity solutions and partnerships, enhancing incident management and operational efficiency.
2023 Cybersecurity Product Recap

Table of Contents

At Lumu, our dedicated product team is constantly working to ensure that customers receive the best possible experience in cybersecurity operations. During 2023, we’ve significantly enhanced the platform for better SecOps and integrability. 

Over the last 12 months, we analyzed 2.6 trillion+  records of network metadata, 160% more than in 2022. From that metadata, we detected 321 million+ adversarial contacts, 67% more than in 2022. You may ask why this is relevant. Well, the more network metadata we analyze, the more efficient our AI capabilities become. Through collective defense, online learning, and transfer learning AI models, our system is set up to improve with additional customers and metadata sources.

Let’s take a look at some of the product highlights and enhancements to the platform in 2023. 

Empowering SecOps Teams

Lumu has always been focused on helping organizations of all sizes and verticals operate cybersecurity better. This is why we made significant changes to our incident management platform. 

With the feedback from many of our customers, we enhanced the incident view to give cybersecurity teams insights into all malicious activity with the ability to filter, understand operational metrics, and take actions like closing and muting incidents.

incident view

In this section, you’ll also be able to see how many incidents have been closed or muted based on the selected timeframe.

operational metrics

The ‘Incident Details’ section is where teams prioritize incidents and view incidents based on what is open, muted, or closed.

Our ‘Filters’ section allows users to filter incidents based on threat type, endpoints affected, labels, contacts, date of creation, and more. These filters are designed to quickly find incidents of interest.

incident detail filter

This section also allows you to search for incidents by typing keywords, download the list of incidents, refresh incidents, and clear filters as needed.

incident search

Lastly, the ‘Take Action’ option gives you the ability to select multiple incidents and take group actions like closing, muting, or marking ‘Start Working’ to let other members of the organization know that you’re working on it.

incident actions

Focused on prioritization and incident management, the incident view was tailored for optimization, helping companies we protect be more efficient when every second counts. This change was also designed to facilitate the extraction of data for interactions with other stakeholders within the organization like CISOs, upper management, and the Board of Directors.

More Context, Better Decision Making

Our incidents now contain additional details around actions taken by other elements of the cybersecurity stack. This helps customers understand what has already been done so they can focus on remediation efforts and closing the incident within the Lumu portal quickly.

incident integration context

In addition to MITRE tactics and techniques used in a single incident, we’ve also introduced a Global MITRE ATT&CK Matrix view in 2023 and reported on the most commonly used based on all incidents impacting a particular customer.

This feature provides a holistic view of top attacks and shows security analysts frequently used techniques so they can adjust their tech stack according to threats that are impacting them most. It helps to prioritize projects, budgets, and adopt a threat-informed defense strategy

More Deployment and Data Collection Capabilities

We added more options for Lumu customers to collect metadata from any environment with the addition of Agents for Linux users and servers.

deployment agents

We also added out-of-the-box integrations for data collection from Kubernetes and Netskope, for a simplified data collection experience.

data collection integrations netskope kubernetes

Some other notable data collection integrations that were added this year include:

Closing the Gaps in Your Cybersecurity Operation

Our integration ecosystem has grown significantly with the addition of over 40 integrations to our product over the past 12 months This bringings our total integration count to around 125+

Integrations are a key component of our mission at Lumu as they enable customers to leverage their existing tools and resources for an efficient cybersecurity operation.

Here are some notable product integrations that were added for real-time incident response and security operations. 

Incident Response

We incorporated a number of new integrations designed to facilitate real-time responses to malicious incidents.

One of the more notable incident response integrations added in 2023 is Microsoft Defender.

This integration allows customers to designate precise actions against different threat types, leveraging threat intelligence from Lumu paired with Microsoft’s endpoint protection.

Security Operations

We also enhanced the ability to manage incidents using your existing tools by adding new Security Operations integrations for unified incident management.

Cybersecurity Partnerships

Our partnerships with other technology vendors is a critical component in maintaining and growing our integration ecosystem. This year we announced formal partnerships with:

Product Recognition

Lumu was also recognized as a Leader by not one but TWO major analyst firms.

Forrester named Lumu a Leader in Forrester’s Network Analysis And Visibility Landscape, Q1 2023.

GigaOm named Lumu a Leader and outperformer in the GigaOm Radar for Network Detection and Response (NDR)

Between enhancements to the Lumu platform, the growth of our integration ecosystem, and industry validation it’s no doubt that 2023 was an eventful year for Lumu.  We won’t stop until organizations of all sizes and verticals can operate cybersecurity proficiently: 2024 will bring an array of exciting enhancements aimed to revolutionize the Lumu platform even further.

Subscribe to Our Blog

Get the latest cybersecurity articles and insights straight from the experts.

Share this post

RELATED POSTS

cybersecurity integrations questionnaire
Trends

Cybersecurity Integrations: A Buyer’s Guide

Reading Time: 3 mins Choosing the right cybersecurity solution is pivotal in today’s threat landscape. Our buyer’s guide zeroes in on cybersecurity integrations, offering key questions to ask vendors about API availability, out-of-the-box solutions, and technical support.