Consistent, automated security for the entire IT ecosystem: Cavirin

“At the end of the day, the goals are simple: safety and security” – Jodi Rell

Cavirin began its life at Bell Labs as a network change and configuration tool. At its core was a powerful discovery tool that supported the broadest range of hardware they’d ever seen. It worked in the datacenter, in the cloud and across multivendor environments. It was the perfect raw material to shape into a market-leading product.

While they have preserved elements of the original acquisition, they have reconceived much, as well. They added a feature for capturing configuration data to save and use as baseline policies. They added a library of over 30,000 out-of-the-box policies (including regulatory policies, such as PCI and HIPAA), and created a feature for easily modifying and building new ones. They have created a true “command-and-control center” for the entire IT ecosystem.

Headquartered in Santa Clara, California, US, the nerve center of Silicon Valley, Cavirin’s offices are buzzing with techie discussions and debates over coffee and locations for group lunches. Their small, multicultural team has truly come together, bonding over programming languages, data structures and spicy snacks.

No worries! Cavirin’s got your back
Cavirin is the only solution on the market that safeguards the workloads running within the public clouds, as well their corresponding accounts. It supports the broadest range of devices and vendors on the market, so nothing escapes notice. It searches out outdated and unpatched servers (the number-one culprit implicated in major IT security breaches), checks the firewall configurations against best practices and regulatory policies, and ensures that one is running on standard configs everywhere. But it doesn’t stop there. Cavirin also monitors the accounts, ensuring tight access control, strict password and lockout policies, and unused accounts.

Cavirin continuously discovers IT environment, from datacenter to cloud. It ferrets out new servers, devices, IPs, and cloud instances and lets you create security groups. You select and create policies that apply to each group and Cavirin will check each new discovery against those policies, alerting you to changes and violations. Cavirin supports the broadest range of devices and vendors on the market, so nothing escapes notice. It searches out outdated and unpatched servers (the number-one culprit implicated in major IT security breaches), checks firewall configurations against best practices and regulatory policies, and ensures that one is running standard configurations everywhere. But it doesn’t stop there. Cavirin also monitors accounts, ensuring tight access control, strict password and lockout policies, and unused accounts.

Customers can choose from thousands of out-of-the-box policies or define one’s own. Cavirin checks each new discovery against those policies, alerting you to changes and violations. Cavirin supports the broadest range of devices and vendors on the market, so nothing escapes notice. It searches out outdated and unpatched servers (the number-one culprit implicated in major IT security breaches), checks firewall configurations against best practices and regulatory policies and ensures that one is running on standard configs everywhere.

Some of Cavirin’s happy customers
“The compliance landscape in any company these days is getting to be almost unmanageable, as long as you are going to continue doing it in a manual way. One of the primary challenges companies are facing is with the integrity of the artifacts. As a company grows, it gets to a point where achieving compliance and security on all fronts is no longer sustainable. That creates a blind spot for many fast-growing companies. Cavirin can fill that blind spot.” – Kim Green, CISO of Zephyr Health

“Cavirin has saved my team weeks of manual audits. ARAP’s continuous scanning functionality allows to us to watch for policy drift that may occur, as well as any misconfiguration or malicious intent. Having direct access to this information helps ease the burden of audit compliance as well.” – Ray Espinoza, Director of Operations and Security, Gainsigh

Meet the Key Executive

Rao Papolu, CEO: Rao is the Chairman of the Board of Directors of Cavirin, and currently oversees the operational aspects of Cavirin as an Interim CEO. He is also the President of SRA OSS Inc., which he successfully launched in 2005. In the past he has held several prominent positions such as COO of SRA America, Inc., Country Manager for EMRC Japan (leading PLM Company) and General Manager of Moldflow (which was subsequently acquired by Autodesk). He has also successfully managed PLM channel partners and distributors such as ISI Dentsu, Bosch, Kubota Graphics and IBM Japan, etc. Dr. Rao brings with him a vast wealth of technology and business experience in his career span of 33 years of which 14 years were spent in Tokyo, Japan.

“Cavirin helps you demonstrate your security and compliance posture. We call that competitive advantage.”