Axonius
by Axonius
by Axonius
Profile Information Last updated on: 10 July 2024
Profile Information Last updated on: 10 July 2024
We help make selecting a software for your business effortless, economical and efficient.
by Axonius
by Axonius
Profile Information Last updated on: 10 July 2024
Profile Information Last updated on: 10 July 2024
1. Project Requirements Gathering: Initially, the process begins with gathering detailed project requirements. This involves understanding the specific needs of the organization, the scope of the assets to be managed, and any particular challenges that need to be addressed.
2. Access and Setup: The next step is to obtain access to the Axonius software. This usually involves setting up the necessary environments and ensuring that all prerequisites for the software installation are met. The setup phase may include configuring the software to integrate with existing systems and data sources.
3. Integration and Configuration: Axonius integrates with a wide range of data sources and IT management tools. This phase involves configuring these integrations to ensure that Axonius can aggregate and normalize data from all relevant sources. The complexity of this step can vary significantly based on the number and type of integrations.
4. Data Aggregation and Normalization: Once integrations are set up, Axonius begins aggregating data from the connected sources. This data is then normalized to ensure consistency and usability across the platform. This step is crucial for the effective management and visibility of assets.
5. Validation and Testing: After the initial setup and data aggregation, the implementation process usually includes a phase of validation and testing. This ensures that the system works as expected and meets all the security and management requirements set out in the initial project scope.
6. Training and Deployment: The final steps involve training the relevant staff on how to use the Axonius platform effectively and then fully deploying the solution across the organization. This phase also includes setting up any necessary policies and automation workflows within the platform.
Implementation Duration
The duration of the implementation process can vary. For some organizations, especially those with a well-defined scope and fewer integrations, the implementation might be relatively quick. For others, particularly large enterprises with complex environments and multiple integrations, the process could take longer. Specific timelines are not detailed in the provided sources, but the complexity of the environment and the scope of the deployment will significantly influence the duration.
In summary, the implementation process for Axonius involves several detailed steps, from initial setup and integration to training and full deployment. The duration of the implementation can vary based on the complexity of the organization’s environment and the specific requirements of the project.
1. Custom Schema Entry (JSON): Axonius allows users to add a JSON file to fetch information from one object to another, which can be customized based on the capabilities of the Axonius platform. This feature is particularly useful for users with Cybersecurity Asset Management and/or SaaS Management capabilities.
2. Customizable Data Retrieval: The data retrieved from integrations, such as ServiceNow, is highly customizable. Users can configure the software to connect to specific tables and their child tables, and these tables can be added or removed as per the adapter settings.
3. Enforcement Actions: Axonius supports customizable enforcement actions, such as creating and updating devices in ServiceNow, and creating incidents based on device or user data. These actions can be tailored to meet specific operational needs.
4. Custom Integrations: Axonius supports custom integrations, which are crucial for aggregating, correlating, and comparing asset data with other valuable asset data sources. This flexibility is essential for businesses that use a variety of IT and security tools.
5. Customizable Dashboard Templates: Axonius provides preconfigured dashboard templates that can be customized to display relevant system information once the appropriate adapters are connected and a discovery cycle is run. These templates are designed based on common role-based scenarios to provide users with quick access to the data they need.
6. Custom Rules and Notifications: In the latest version of Axonius, users can customize rules to align with their business needs and evaluate security policies. Additionally, the software allows for customized notifications on asset changes, helping to accelerate asset investigations and incident responses.
7. API-Driven Customizations: Axonius takes an API-driven, agentless approach to collect and correlate asset information, which supports extensive customization through API integrations. This capability allows businesses to integrate Axonius seamlessly with their existing IT and security workflows.
8. Comprehensive API Integrations: The platform supports deep customization through comprehensive API integrations, which validate and enhance security and management processes tailored to specific business needs.
These features demonstrate Axonius' flexibility and its ability to be tailored to meet the specific asset management and security requirements of various businesses, making it a versatile tool in the cybersecurity asset management landscape.
The additional costs associated with Axonius software, such as setup fees, maintenance, or support charges, are outlined primarily in the terms and conditions and support details provided by Axonius.
1. Setup Fees: The specific setup fees are not detailed in the provided sources. However, considering the complexity and customization options of Axonius software, there may be initial costs related to the deployment and configuration, depending on the specific needs of the business.
2. Maintenance Fees: Maintenance costs are typically included in the subscription fees. Axonius offers updates and upgrades as part of its service to ensure platform continuity and compliance with the latest security practices. This is often a part of the ongoing subscription rather than a separate maintenance fee.
3. Support Charges:
- Standard and Premium Support: Axonius provides different levels of technical support, categorized under standard and premium options. The premium support likely incurs higher costs but offers more extensive services, such as shorter response times and more direct access to technical account managers.
- Interest on Late Payments: If payments for the services are not made on time, Axonius charges an interest rate of 1.5% per month on overdue payments. This is compounded monthly and is calculated from the due date until the payment is made.
- Support Included with Purchase: Basic support services are included with the purchase of Axonius solutions. However, for more comprehensive or enhanced support services, additional fees may apply. This can include access to a technical account manager (TAM), proactive case management, and more in-depth technical training.
4. Additional Fee for Premium Services: For organizations requiring beyond the standard support, Axonius offers premium support services which include faster response times and more direct access to support resources. These services are available at an additional cost, which would be detailed in the service agreement or sales order.
In summary, while Axonius includes some level of support and maintenance in its standard subscription fees, additional costs can be incurred for premium support services, late payment of fees, and potentially for initial setup, depending on the complexity of the deployment.
Axonius Software offers a comprehensive range of training and support options to new users to ensure they can effectively utilize the platform.
1. Helpdesk Support: Axonius provides customer support through their helpdesk at https://support.axonius.com/ during regular business hours. This support is designed to assist with questions and requests concerning their solutions.
2. Axonius Foundations Course: This course is a structured training program that helps new users understand their assets, discover coverage gaps, and enforce security policies. The course covers various modules, including adapters, devices, users, dashboards, reports, the enforcement center, and cloud asset compliance. By the end of this course, users are expected to have the confidence and ability to see all of their assets, validate security policies, and automate remediation.
3. Interactive Product Tours: Axonius offers interactive product tours that guide users through key applications of their Cybersecurity Asset Management and SaaS Management solutions. These tours are designed to provide a hands-on experience with the platform, helping users understand its capabilities and how to use it effectively in their IT and security operations.
4. Video Resources: Axonius has produced several video resources, such as the Axonius Foundations Course videos, which are available on platforms like YouTube. These videos provide overviews of various aspects of the platform, including devices and queries, dashboards, and cloud asset compliance. These resources are aimed at enhancing user understanding and proficiency with the platform.
5. Documentation and Online Resources: Axonius maintains a comprehensive documentation portal that includes detailed guides on different aspects of the platform, such as software management and the Axonius software catalog. These documents are designed to help users navigate the platform and utilize its features effectively.
These training and support resources are part of Axonius' commitment to ensuring that users can leverage the full capabilities of their platform to manage and secure their IT assets effectively.
Axonius employs a comprehensive set of security measures to protect data, focusing on safeguarding the confidentiality, integrity, availability, and privacy of information systems and data that it stores or processes.
1. Security Frameworks and Certifications**:
- SOC 2 and ISO 27001: Axonius uses the SOC 2 Trust Services Criteria for Security and ISO 27001 standards to structure its security program. These frameworks help ensure the implementation of comprehensive security measures such as access control, infrastructure and application defenses, risk management, and more.
- HIPAA Compliance: For customers that process protected health information, Axonius has obtained a Type 1 attestation for the HIPAA Security Rule and HITECH Breach Notification requirements, providing additional assurance regarding the handling of sensitive health data.
2. Data Encryption and Patch Management:
- Encryption: All network interactions within the Axonius platform are encrypted using modern cryptographic mechanisms to secure data in transit.
- Patching: Axonius regularly patches its infrastructure to address relevant vulnerabilities. This is complemented by vulnerability scanning and other security tools to validate that patching works as expected and to identify any configuration issues.
3. Shared Security Responsibility Model:
- Axonius-Hosted Solutions: For customers where Axonius hosts the product, Axonius manages the operating system and packages inside the virtual machine, ensuring the security of the hosting environment.
- Customer-Hosted Solutions: In scenarios where the customer hosts the Axonius product, the customer is responsible for the physical security measures of the hosting environment and managing the virtual machine's security configuration and patches.
4. Secure Development Lifecycle (SDL):
- Axonius has a formal Secure Development Lifecycle program that identifies and remediates vulnerabilities in its code and dependencies. This program is part of Axonius' commitment to maintaining the security integrity of its applications.
5. Role-Based Access Control (RBAC):
- Axonius implements RBAC to manage access to its systems. This involves assigning users to specific roles, each with a defined set of permissions that control access to various elements within the system.
6. Data Processing Agreement (DPA):
- Axonius has a Data Processing Agreement that outlines the mutual consent for processing personal data in accordance with its solutions and agreements. This agreement is designed to ensure that data handling practices comply with relevant data protection laws.
These security measures demonstrate Axonius' commitment to maintaining a robust security posture that aligns with industry best practices and regulatory requirements, ensuring the protection of customer data across various deployment models.
Axonius regularly releases updates to its software, including both major and minor enhancements. The management of these updates is structured and continuous, ensuring that new features, improvements, and security measures are systematically integrated into the platform.
1. Release Frequency: Axonius releases updates frequently, with new features and enhancements detailed in their version release notes. For instance, the release notes for versions 6.0.7 and 6.0.8 were documented, indicating ongoing development and updates within the software.
2. Ongoing Updates: Axonius continuously rolls out updates to its adapters and enforcement actions, as seen in the ongoing updates for version 6.1, which include all the features and enhancements from the 6.0 minor releases since version 6.0.2[5]. This demonstrates a regular cadence of updates aimed at improving functionality and addressing user needs.
3. Version Management: New versions are introduced with significant enhancements. For example, Axonius version 6.1 introduced new features such as a software approval list and enhancements to the software management module. These updates are part of Axonius's commitment to advancing its platform capabilities.
4. Documentation and Communication: Each update is accompanied by comprehensive release notes that detail the new features, enhancements, and any changes made to the system. This documentation is crucial for users to understand the updates and how they may impact their use of the platform.
5. Interactive Product Tours: Axonius also offers interactive product tours with each new release, guiding users through the key applications of the updated features. This helps in familiarizing users with new functionalities and ensuring they can leverage the platform effectively.
In summary, Axonius maintains a robust schedule of regular updates, which are well-documented and communicated to users through release notes and interactive tours. This approach ensures that the platform evolves continuously to meet the changing needs of its users and to enhance its cybersecurity and asset management capabilities.
Axonius Software's policy on data ownership and portability is clearly outlined in their Terms and Conditions and Data Processing Agreement. Here are the key points regarding data ownership and portability:
Data Ownership
- Company Data Ownership: Axonius acknowledges that the company (user) retains all right, title, and interest in and to the Company Data. This means that the data generated, collected, or processed by the company while using Axonius solutions remains the property of the company.
- Limited License to Axonius: The company grants Axonius a worldwide, royalty-free license to process the Company Data. This processing is limited to providing and maintaining the Solutions and Support, addressing technical or security issues, ensuring compliance with the Agreement, fulfilling legal requirements, and other permissions explicitly granted by the company.
Data Portability
- Data Processing Agreement (DPA): The DPA between Axonius and the company reflects the agreement regarding the processing of personal data. It specifies that Axonius processes personal data solely on behalf of the company, underlining the company's ownership and control over its data.
- Compliance with Privacy Laws: The incorporation of the DPA into the Terms and Conditions ensures that any processing of personal data by Axonius, which might be considered under applicable privacy, security, and data protection laws to be "personal" data/information, adheres to these laws. This agreement supports the principle of data portability, as it acknowledges the company's rights over its data and the conditions under which it can be processed.
In summary, Axonius Software's policy emphasizes the company's ownership of its data while granting Axonius a limited license to process this data for specific, agreed-upon purposes. The Data Processing Agreement further reinforces this stance by detailing the conditions under which personal data is processed, ensuring compliance with relevant data protection laws and supporting data portability principles.
1. Customizable and Scalable Solutions: Axonius is designed to centralize and enhance IT data, revealing security gaps and decreasing incidents. This implies a level of customization and scalability that can adapt to the growing environment of an organization like Avant.
2. Unified Platform: The Axonius platform unifies Cybersecurity Asset Management and SaaS Management into a single platform. This convergence suggests that customers can increase asset and vulnerability visibility, and improve security, IT, operations, and risk teams’ efficacy as organizational needs evolve.
3. SaaS Management for Scalability: Axonius SaaS Management enables customers to discover all SaaS applications, including sanctioned, unsanctioned, shadow, and unmanaged apps. This feature is crucial for organizations looking to scale, as it provides actionable visibility into the interconnectivity flows between SaaS apps and third/fourth party app extensions, allowing for better IT management and cost optimization.
4. Integration with Security and IT Management Tools: Axonius integrates with a wide range of security and IT management tools. This integration capability means that as an organization grows or reduces its use of different tools, Axonius can adapt by connecting to new tools or disconnecting from unused ones, maintaining a comprehensive asset management system.
5. Adaptation to Regulatory Compliance: Axonius supports additional regulatory compliance frameworks and standards to improve software supply chain security. This adaptability is crucial for organizations that may need to scale up or down their compliance efforts in response to changing regulatory requirements.
The terms and conditions for contract renewal and cancellation for Axonius Software are outlined in their License Agreement and related documents.
Contract Renewal
1. Subscription Periods: The License Agreement specifies that during each Solution's respective subscription period, as set forth in an active Sales Order, Axonius grants the Company a limited, non-exclusive, non-transferable, and non-sublicensable right to use each Solution.
2. Renewal Management Features: Axonius offers renewal management as part of its software licensing control suite. This includes monitoring software contract renewals, which can help organizations manage their renewals proactively.
3. Automatic Renewals: The inclusion of renewal management features suggests that Axonius supports mechanisms to track and manage renewal dates effectively, which typically includes notifications and alerts for upcoming renewals.
Contract Cancellation
1. Termination Rights: The License Agreement likely includes standard termination rights, which allow either party to terminate the agreement under specific conditions such as breach of contract or insolvency. However, the exact details of these conditions are not specified in the provided sources.
2. Financial Obligations Upon Cancellation: The agreement specifies that the Company must pay all fees set forth in each Sales Order for the Solutions specified therein. This implies that upon cancellation, any outstanding fees for the current subscription period would likely still be due.
3. Data Retention and Deletion: Upon termination or expiration of the agreement, Axonius' obligations regarding data retention and deletion would be governed by the terms of the Data Processing Agreement. This agreement outlines how personal data is handled, ensuring compliance with applicable data protection laws.
4. Dispute Resolution: In case of disputes, the agreement may include terms for dispute resolution, typically involving negotiation, mediation, and, if necessary, arbitration or legal proceedings. These processes are designed to resolve any issues arising from contract cancellation or other disputes.
Axonius software meets several compliance standards, reflecting its commitment to maintaining high levels of security and data protection. Here are the compliance standards that Axonius adheres to:
1. SOC 2: Axonius uses the SOC 2 Trust Services Criteria for Security, which helps ensure the implementation of comprehensive security measures such as access control, infrastructure and application defenses, and risk management. SOC 2 is a widely respected framework that focuses on the security, availability, processing integrity, confidentiality, and privacy of a system.
2. ISO 27001: Axonius has obtained an ISO 27001 certificate, which is an international standard for information security management systems (ISMS). ISO 27001 provides a systematic approach to managing sensitive company information so that it remains secure, including people, processes, and IT systems.
3. HIPAA: For customers that process protected health information, Axonius has obtained a Type 1 attestation for the HIPAA Security Rule and HITECH Breach Notification requirements. HIPAA (Health Insurance Portability and Accountability Act) sets the standard for protecting sensitive patient data in the U.S.
These compliance standards demonstrate Axonius's dedication to adhering to rigorous security protocols and regulations, ensuring that their software provides a secure environment for managing and protecting digital assets.
By Axonius