Positive Technologies — information security and threat protection

Positive Technologies is a Russian company and one of the world's leading developers of information security solutions. Founded in 2002, headquartered in Moscow. Positive Technologies products are used by more than 2,300 organizations worldwide, including 80% of companies from the Expert-400 rating. The company is the first and only one from the cybersecurity sector whose shares are traded on the Moscow Exchange (MOEX: POSI).

Official website: ptsecurity.com

Positive Technologies Product Categories

1. SIEM Systems — MaxPatrol SIEM

An intrusion detection and security event management system (SIEM). Collection and analysis of security events from all sources of the IT infrastructure in real time. Automatic detection of attacks and anomalies, incident prioritization.

2. Web Application Protection — PT Application Firewall

Protection of web applications from 0-day attacks. OWASP Top 10 support. Automatic blocking of attacks without the need to update rules. Suitable for protecting corporate portals and internet services.

3. Threat Analysis — PT Sandbox

A sandbox for threat analysis. Isolation and analysis of suspicious files in a contained environment. Detailed report on file behavior. For detecting complex targeted attacks.

4. Data Leak Protection — Positive SafeNet

A solution for data leak protection (DLP). Monitoring of data transfer channels, control of access to confidential information.

5. Access Control — MaxPatrol 8

A comprehensive system for auditing and controlling privileged access. Monitoring of administrator actions, session control, access rights management.

6. Additional Solutions

• PT ISIM: security of industrial networks (ACS).
• PT Container Security: protection of containers and cloud environments.
• PT Application Inspector / PT BlackBox: secure development and penetration testing.
• MaxPatrol O2 / MaxPatrol Carbon: meta-products for proactive cyber resilience management.

Positive Technologies Technologies

• CyberPogoda: an attack forecasting platform.
• PT Threat Intelligence Feeds: threat data feeds for integration with SIEM systems.
• PT Network Attack Discovery: analysis of network traffic (NTA/NDR).
• AI/ML: use of machine learning to detect anomalies and adapt to new types of attacks.
• Big Data Analytics: for detecting complex targeted attacks.