Precise Insight and Visibility Of Tactics
PIVOT™
PIVOT is independent, full attack-chain testing of cyber security products against realistic adversary behaviour. PIVOT 27 is already underway with vendors including Broadcom, CrowdStrike, Fortinet, Palo Alto Networks and Sophos taking part. To learn more and to sign up for subsequent PIVOT tests contact us now.
PIVOT explained
Across the full attack chain
PIVOT evaluates how cyber security products perform against realistic attacks, from initial access through to possible persistence, lateral movement, data theft or destruction.
It measures what products prevent, what they detect, how far an attacker is able to progress and what defenders can understand during and after the attack.
The result is a comparative view of how different security products behave when faced with the same adversary techniques, rather than a simple count of alerts or detections.
Prevent
Did the product stop the attack?
Detect
What malicious activity did it identify?
Investigate
What could defenders understand afterwards?
Compare
How did products differ against the same attack?
Methodology
Real attacks. Consistent testing. Clear evidence.
PIVOT is based on SE Labs’ Advanced Security methodology and uses complete attack chains based on the tactics and techniques of known threat groups.
Products face the same attack scenarios under controlled conditions. SE Labs measures what each product prevents, what it detects, how far the attacker progresses and how effectively the attempted breach can be investigated afterwards.
The threat groups used in each PIVOT test are not disclosed until testing is complete.
Download Advanced Security Methodology
Who PIVOT is for
Independent evidence for better decisions
PIVOT provides comparative evidence for enterprise security teams, detailed performance insight for cyber security vendors, and independent test data for industry analysts.
Enterprise users
Understand how different security products behave against the same realistic attacks, including what they prevent, what they detect, how far an attacker can progress and what your security team would be able to investigate.
Cyber security vendors
See where your product performs well and where it can improve. PIVOT provides detailed evidence that supports engineering, product development and credible communication of product performance.
Industry analysts
Access independent, comparative test data that complements vendor research, customer feedback and market analysis, providing another evidence source for assessing security technologies.
