Data Security and Compliance

Fast and Affordable Security Checkups for Small Businesses
Is your small business network keeping pace with today's security environment? Are you protecting your network assets? How difficult would it be for a hacker to break into your information system, and what steps can you take to prevent it? Progent has developed a fast and affordable way for small businesses to answer these questions without disrupting their network operations.

Progent's Network Security Inventory packages are fixed-price service bundles that rely on advanced network scanning technology and the certified expertise of Progent's security engineers to evaluate the vulnerability of your network and provide recommendations for simple ways you can mitigate your security risk. Progent offers two packages, the External Network Security Inventory and the Internal Network Security Inventory, which assess different aspects of network security exposure and which you can use separately or together. Both packages offer features designed for the needs of small businesses who want to take a more proactive role in making their networks safe from malicious assaults but who don't have the time or the budget to manage an exhaustive enterprise-class network security audit.

Top Features and Benefits of Progent's Security Inventory Packages for Small Business Networks
Progent's Security Inventory packages offer an array of features and benefits especially designed to address today's increasingly hostile security environment in which all business networks operate but also to take into account the financial and operational realties of small companies. Implemented together or separately, Progent's External and Internal security scanning packages help small businesses achieve a high level of network protection at little cost or hassle.

• Low-cost:
  Progent's Network Security Inventory packages are inexpensive and are offered at a set-price, so you know in advance what it will cost to understand the state of your network security. Potential attack vectors detected by Progent's security scans are typically easy to fix and involve configuration issues with network operating systems, applications, and devices. If you have not regularly utilized security scans in the past, you get a lot of bang for your buck. Generally, a great deal of security risk associated with small business networks can be substantially reduced at very little expense.
• Fast:
  The scanning, analysis, and reporting processes involved in Progent's Network Security Inventory packages can usually be completed in one business day. This fast turnaround can reduce the window during which your network is exposed to attack by allowing you to move quickly into remediation mode. This also reduces the stressful suspense management may feel not knowing whether information assets are safe, and minimizes the time that your network manager is diverted from other responsibilities. A combination of advanced scanning technology and experienced engineers allow Progent's security team to deliver results quickly and at low cost to the customer.
• Remote Scanning:
  The scanning phase of Progent's Network Security Inventory packages are managed remotely from a secure Progent site. In the case of the Internal Network Security Inventory package, the scan is itself run from an onsite machine made available by the customer. The setup procedure for external or internal scans can accomplished in minutes, and the collected data is analyzed offsite by Progent's certified security professionals. By utilizing remote tools to conduct the Network Security Inventory packages, Progent saves significant time and money, which in turn allows Progent to offer these packages at prices that small businesses can afford.
• Proactive:
  Progent's Network Security Inventory packages are not intended to detect and remove viruses or other malware resulting from a successful attack on your network, but to uncover common security gaps before they are exploited by malicious sources. Although larger enterprises routinely utilize third-party consulting firms like Progent to conduct vulnerability scans in order to benefit from an objective risk assessment, small businesses with limited IT budgets and technical expertise often wait until their networks are hacked before getting serious about security. By offering vulnerability scanning packages that are fast, affordable, and effective, Progent makes it a no brainer for small businesses to take the lead in protecting their network assets.
• Certified Security Engineers:
  Progent's security engineers have been certified by some of the industry's most prestigious standards institutions including the Information Systems Audit and Control Association (ISACA), the International Information Systems Security Certification Consortium (ISC), and the SANS Institute. Progent's security team has worked with major enterprises to assess and enhance network security. With Progent's Network Security Inventory packages, small businesses get the benefit of vulnerability assessments from world-class security professionals without requiring an enterprise-class IT budget.
• Effective:
  Progent's security engineers are familiar with the sophisticated tools and techniques hackers employ to break into information networks to steal and control resources and data. The majority of these intrusion attempts are based on exploiting security gaps that are surprisingly easy to block. Both of Progent's Network Security Inventory packages address a separate range of potential security vulnerabilities often found in small business IT networks. Either package will provide information to help you enhance your network protection. Using the external and the internal scan packages together will allow you to secure your network even more.
• Actionable Reporting:
  The data collected from Progent's Network Security Inventory scans are analyzed by a certified engineer on Progent's security team. As part of the package, Progent's security engineer will prepare and send a report that summarizes the results of the vulnerability scan and suggests mitigation procedures that can be performed by Progent, by your in-house IT support staff, or by a competent third-party security consulting firm. Any remedial work requested from Progent will be performed as a separate project for which Progent can provide a time estimate and for which Progent will bill at standard consulting rates.

Progent's security team will examine the scanned data, produce a report that summarizes and interprets the results, and make suggestions on efficient ways to reduce your exposure to attack. The external scan will not disrupt your ongoing network operations or noticeably impact your system performance. Progent offers this service package at a low set price that covers setup, scanning, analysis, reporting, and recommendations. The set price does not include remediation services which may be suggested. These follow-on services can be performed by any qualified security engineer and are available from Progent at standard consulting rates.

Internal Security Inventory Scan
Many security attacks originate from inside your company firewall and can be the result of careless employees who attach compromised laptops to your network, workers who try to access restricted information or gain unauthorized administration rights, or lurkers in close physical proximity to your wireless access points. Progent's Internal Network Security Inventory package tests for vulnerabilities within your firewall by looking for open ports and services that are not exposed to the outside world but that could be a source of trouble if improperly configured. The internal scan can be executed from any computer inside your security perimeter that you make temporarily available to Progent's security engineer. Progent will remotely download a virtual machine and the required scanning tools to the internal computer you have assigned, launch the scan, and transfer the collected data to a secure Progent site. Progent does not need to make an expensive onsite service call and the time required to install and subsequently remove the scanning software is negligible.

Progent's security engineer managing the Internal Security Inventory Scan will examine the scanned data and create a report that summarizes the results and suggests any mitigation measures that may be required. Progent offers this service package at a low set price that covers setup, scanning, analysis, reporting, and recommendations. The set price does not include remediation services which may be suggested. These follow-on services can be performed by any qualified security engineer and are available from Progent at standard consulting rates.

Download the Security Inventory Scan Datasheet
To download a single-page printable datasheet describing Progent's two set-price Security Inventory Scan service packages for small businesses, click:
Security Inventory Scanning Packages (PDF - 104 KB).

Additional Network Security Auditing Services Available from Progent
Progent offers a variety of additional services designed to check your network for vulnerabilities, verify your compliance with governmental or industry security standards, and mitigate critical gaps in your network's defenses:

• Enterprise Vulnerability Assessment Service Packages
  Progent can provide a range of set-price enterprise security assessment service packages created for corporations who need to comply with security standards required by state agencies or by customers. Progent's security assessment packages offer larger businesses an opportunity to get an objective opinion about the strength of their network security. For each security inventory or evaluation bundle, Progent engineers with high-level security credentials analyze and report on collected data and provide suggestions for effective improvements. An added-cost option for on-premises security engineers is available throughout United States.
• Consulting Services for Horizon3.ai's NodeZero Pentest Solutions
  NodeZero from Horizon3.ai is a cutting-edge penetration test (pentest) product family that can deliver repeated, simultaneous, programmable testing of your network to help you expose, prioritize, fix, and verify cybersecurity vulnerabilities before malicious hackers can exploit them. Progent offers the skills of a NodeZero Certified Operator (NCO) who can assist you to use NodeZero to perform comprehensive pentests of your network perimeter and your internal IT infrastructure so you can evaluate your current security profile. Progent's NodeZero experts can also assist you to strengthen your network security and can assist you to design and deploy a cohesive cybersecurity ecosystem that streamlines management and provides optimum cyber defense for on-prem, multi-cloud, and perimeter IT assets. To find out more details about Progent's threat assessment solutions powered by on NodeZero's penetration test products, refer to Consulting Services for NodeZero's Penetration Test Products.
• Unannounced Penetration Testing
  Progent can perform in-depth penetration testing without the knowledge of in-house network resources. Stealth Security Testing reveals whether in-place network security monitoring mechanisms like penetration detection alarms and event log monitoring are correctly configured and actively monitored. Progent security engineers can use a number of hacker techniques to expand security holes to gain knowledge of the entire network environment and detect how many internal systems can be accessed and exploited. This type of vulnerability testing can show the full extent of the security flaws of a network.
• Security Assessment Consulting Services
  Progent's expert security audit and compliance testing services can help your company to evaluate your procedures and policies and check your network infrastructure to allow your company to build the maximum level of protection into your information system. Progent's security consultants can also manually check your web-based business applications for security vulnerability and can perform corporate-wide security audits to verify your company's compliance with major security standards such as HIPAA, FISMA, NIST, PCI, and ISO.

• ProSight Active Security Monitoring (ASM): Next Generation Endpoint Protection and Ransomware Recovery
  ProSight Active Security Monitoring (ASM) is an endpoint protection (EPP) service that utilizes SentinelOne's next generation behavior machine learning tools to guard endpoint devices and physical and virtual servers against modern malware assaults like ransomware and email phishing, which routinely escape legacy signature-matching AV products. ProSight Active Security Monitoring safeguards on-premises and cloud-based resources and offers a single platform to address the complete threat lifecycle including protection, infiltration detection, mitigation, remediation, and forensics. Key capabilities include single-click rollback with Windows Volume Shadow Copy Service and automatic network-wide immunization against new threats. Progent is a SentinelOne Partner, dealer, and integrator. Learn more about Progent's ProSight Active Security Monitoring (ASM) endpoint protection and ransomware defense with SentinelOne technology.

• ProSight Enhanced Security Protection: Unified Endpoint Protection
  ProSight Enhanced Security Protection (ESP) managed services offer economical in-depth security for physical and virtual servers, desktops, mobile devices, and Microsoft Exchange. ProSight ESP utilizes adaptive security and modern behavior analysis for round-the-clock monitoring and reacting to security threats from all attack vectors. ProSight ESP offers firewall protection, penetration alerts, device management, and web filtering via cutting-edge tools incorporated within one agent managed from a unified console. Progent's data protection and virtualization consultants can help you to design and configure a ProSight ESP deployment that meets your organization's unique needs and that allows you demonstrate compliance with government and industry data security regulations. Progent will assist you define and implement policies that ProSight ESP will manage, and Progent will monitor your IT environment and respond to alarms that call for immediate action. Progent can also help your company to install and test a backup and disaster recovery system such as ProSight Data Protection Services (DPS) so you can get back in business quickly from a potentially disastrous security attack like ransomware. Find out more about Progent's ProSight Enhanced Security Protection (ESP) unified endpoint security and Microsoft Exchange filtering.

• ProSight Data Protection Services: Managed Backup
  Progent has worked with leading backup/restore technology companies to create ProSight Data Protection Services, a family of subscription-based offerings that deliver backup-as-a-service. All ProSight DPS products manage and monitor your backup processes and enable non-disruptive backup and fast recovery of vital files, apps, images, plus virtual machines. ProSight DPS lets your business avoid data loss resulting from equipment failures, natural disasters, fire, cyber attacks such as ransomware, human mistakes, ill-intentioned insiders, or application glitches. Managed backup services available in the ProSight Data Protection family include ProSight Altaro VM Backup, ProSight 365 Total Backup (formerly Altaro Office 365 Backup), ProSight DPS ECHO Backup based on Barracuda dedicated hardware, and ProSight DPS MSP360 Hybrid Backup. Your Progent service representative can assist you to determine which of these fully managed backup services are most appropriate for your IT environment.

• ProSight Email Guard: Inbound and Outbound Spam Filtering, Data Leakage Protection and Content Filtering
  ProSight Email Guard is Progent's email filtering and encryption platform that uses the technology of leading information security companies to provide web-based control and comprehensive protection for your inbound and outbound email. The hybrid structure of Progent's Email Guard managed service integrates a Cloud Protection Layer with an on-premises gateway appliance to provide complete protection against spam, viruses, Denial of Service Attacks, Directory Harvest Attacks (DHAs), and other email-borne malware. Email Guard's Cloud Protection Layer serves as a first line of defense and keeps most unwanted email from reaching your security perimeter. This decreases your vulnerability to inbound attacks and saves network bandwidth and storage. Email Guard's onsite gateway device provides a further layer of inspection for incoming email. For outgoing email, the onsite gateway offers anti-virus and anti-spam filtering, DLP, and encryption. The local security gateway can also assist Microsoft Exchange Server to track and safeguard internal email that stays within your security perimeter. Find out more about Progent's ProSight Email Guard spam filtering, virus defense, content filtering and data loss protection.

• ProSight WAN Watch: Infrastructure Remote Monitoring and Management
  Progent's ProSight WAN Watch is an infrastructure monitoring and management service that makes it simple and inexpensive for small and mid-sized businesses to map out, monitor, reconfigure and troubleshoot their connectivity appliances such as routers, firewalls, and load balancers plus servers, printers, client computers and other devices. Incorporating state-of-the-art RMM technology, WAN Watch ensures that network diagrams are always current, captures and manages the configuration information of virtually all devices connected to your network, tracks performance, and generates alerts when potential issues are discovered. By automating tedious network management activities, ProSight WAN Watch can cut hours off ordinary chores like making network diagrams, reconfiguring your network, finding devices that need critical software patches, or identifying the cause of performance issues. Learn more details about ProSight WAN Watch network infrastructure monitoring and management services.

• ProSight LAN Watch: Server and Desktop Monitoring
  ProSight LAN Watch is Progent's server and desktop remote monitoring managed service that uses advanced remote monitoring and management techniques to keep your IT system running at peak levels by checking the state of vital assets that drive your information system. When ProSight LAN Watch detects a problem, an alarm is transmitted automatically to your designated IT management staff and your assigned Progent engineering consultant so all potential problems can be addressed before they can disrupt your network Learn more about ProSight LAN Watch server and desktop monitoring consulting.

• ProSight Virtual Hosting: Hosted Virtual Machines at Progent's Tier III Data Center
  With Progent's ProSight Virtual Hosting service, a small or mid-size business can have its key servers and apps hosted in a protected fault tolerant data center on a high-performance virtual host configured and maintained by Progent's IT support experts. Under the ProSight Virtual Hosting service model, the client owns the data, the operating system software, and the apps. Since the system is virtualized, it can be moved easily to an alternate hardware environment without requiring a lengthy and technically risky reinstallation procedure. With ProSight Virtual Hosting, your business is not locked into a single hosting provider. Find out more about ProSight Virtual Hosting services.

• ProSight IT Asset Management: Network Documentation Management
  ProSight IT Asset Management service is an IT infrastructure documentation management service that makes it easy to capture, update, retrieve and safeguard data about your network infrastructure, processes, applications, and services. You can instantly find passwords or IP addresses and be warned automatically about impending expirations of SSL certificates or warranties. By cleaning up and managing your network documentation, you can save up to half of time wasted searching for vital information about your IT network. ProSight IT Asset Management includes a centralized location for holding and sharing all documents required for managing your business network such as recommended procedures and self-service instructions. ProSight IT Asset Management also supports advanced automation for gathering and associating IT data. Whether you're planning enhancements, doing regular maintenance, or reacting to an emergency, ProSight IT Asset Management delivers the data you require the instant you need it. Find out more details about Progent's ProSight IT Asset Management service.

• Progent's Patch Management: Patch Management Services
  Progent's managed services for software and firmware patch management offer organizations of all sizes a flexible and affordable alternative for evaluating, validating, scheduling, applying, and documenting updates to your ever-evolving IT network. Besides maximizing the protection and functionality of your computer environment, Progent's software/firmware update management services free up time for your in-house IT team to focus on line-of-business projects and activities that deliver the highest business value from your information network. Learn more about Progent's patch management support services.

• ProSight Duo Multi-Factor Authentication: Identity Validation, Endpoint Remediation, and Protected Single Sign-on
  Progent's Duo authentication services utilize Cisco's Duo technology to defend against stolen passwords by using two-factor authentication. Duo supports single-tap identity confirmation with Apple iOS, Google Android, and other personal devices. With 2FA, when you log into a protected application and give your password you are requested to confirm your identity via a unit that only you have and that is accessed using a different network channel. A broad selection of devices can be used as this added means of ID validation such as a smartphone or wearable, a hardware token, a landline phone, etc. You may designate multiple validation devices. For more information about ProSight Duo identity authentication services, refer to Cisco Duo MFA two-factor authentication (2FA) services.

Progent's ProSight Ransomware Preparedness Report
Progent's ProSight Ransomware Preparedness Report is a low-cost service based on a brief interview with a Progent backup/recovery consultant. The interview is intended to help assess your company's preparedness to block or recover quickly after an attack by a ransomware variant like Ryuk, WannaCry, NotPetya, or Locky. Progent will consult with you personally to gather information concerning your existing security profile and backup/recovery system, and Progent will then deliver a custom Basic Security and Best Practices Report describing how you can follow industry best practices to build a cost-effective AV and backup environment that meets your company's needs. For more information, see The ProSight Ransomware Preparedness Report.

Contact Progent for Network Security Auditing
If you need more information about Progent's network security inventory service bundles, phone Progent at 800-993-9400 or refer to Contact Progent.

Ransomware 24x7 Hot Line: Call 800-462-8800
Progent's Ransomware 24x7 Hot Line is designed to guide organizations to complete the urgent first phase in mitigating a ransomware assault by containing the malware. Progent's online ransomware engineer can help you to identify and isolate breached servers and endpoints and guard clean assets from being compromised. If your network has been breached by any strain of ransomware, don't panic. Get immediate help by calling Progent's Ransomware Hot Line at 800-462-8800. For details, visit Progent's Ransomware 24x7 Hot Line.