Absolute Announces Integration With Splunk Enterprise SIEM For Enhanced Visibility And Faster Threat Remediation

Integration extends Absolute’s growing security partner ecosystem

Absolute, the industry standard for persistent endpoint security and data risk management solutions, recently announced seamless interoperability with Splunk Enterprise for joint customers to aggregate and act faster on security intelligence.

This security information and event management (SIEM) interoperability allows Splunk Enterprise customers to centralize Absolute Data & Device Security (DDS) event data from all endpoint devices – even those off the network – so they can:

• Contextually analyze anomalies in real-time
• Identify early warnings of external cyber threats or potential insider threats
• Instigate responsive and informed incident investigations
• Simplify security, operations, and compliance monitoring
• Operate with the certainty of resilient visibility and control

The integration also facilitates automated responses through a two-way connection established between Absolute DDS and Splunk so that mutual customers can seamlessly initiate Absolute DDS remote risk response actions directly from the Splunk management console.

“Effective IT security requires collaboration and integration between different technology layers so that the vast amounts of data collected can be parsed, analyzed, and leveraged to make better informed and actionable decisions,” said Christopher Bolin, Chief Product Officer, Absolute. “Integrating with Splunk empowers users to garner meaningful insights from Absolute’s endpoint intelligence in the greater context of the organization’s broader security apparatus and endpoint remediation process.”

This announcement highlights Absolute’s growing security partner ecosystem as the company continues to work with other InfoSec leaders to provide customers with greater awareness across their organizations.

The Absolute SIEM connector is available free of charge to all Absolute customers, with enhanced capabilities through collaborations with leading SIEM partners including Splunk®, RSA Analytics, and HPE ArcSight.

The Absolute DDS App for Splunk is supported in Splunk Enterprise and Splunk Cloud.

About Absolute
Absolute Software Corporation is the industry standard in persistent endpoint security and data risk management solutions. Persistence technology from Absolute provides organizations with visibility and control over all of their devices, regardless of user or location. If an Absolute client is removed from an endpoint, it will automatically reinstall so IT can secure each device and the sensitive data it contains. No other technology can do this. Persistence technology is embedded in the firmware of computers, netbooks, tablets and smartphones by global leaders, including Acer, ASUS, Dell, Fujitsu, HP, Lenovo, Microsoft, Panasonic, Samsung, and Toshiba, and the Company has reselling partnerships with these OEMs and others, including Apple. For more information, visit www.absolute.com.