Download PDF
Principle Logic, LLC Leverages Rapid7 for Efficient Security Assessments
Technology Category
- Cybersecurity & Privacy - Security Compliance
- Cybersecurity & Privacy - Application Security
Applicable Industries
- Professional Service
- Software
Applicable Functions
- Quality Assurance
- Business Operation
Use Cases
- Remote Asset Management
Services
- System Integration
- Cybersecurity Services
The Challenge
Most security professionals are strapped for time. In the world of independent consultants, time is even more precious, as their clients prefer engagements to be brief while still yielding business value. Just ask Kevin Beaver, an independent information security consultant with more than 25 years of experience in IT. As the founder of Atlanta-based Principle Logic, LLC, Kevin specializes in performing independent information security assessments for Fortune 1000 companies, nonprofits, and government agencies, among others. For the better part of Kevin’s career, his focus has been on security. “When I graduated high school, computers were the next big thing,” he laughs. “I remember when the concept of people accessing your network first started getting attention.” Fast forward a few years, and he’s now the author of Hacking for Dummies – one of the best-selling books on information security testing that’s currently in its fourth edition.
About The Customer
Principle Logic, LLC is an Atlanta-based independent information security consulting firm founded by Kevin Beaver. Kevin has over 25 years of experience in IT and specializes in performing independent information security assessments for Fortune 1000 companies, nonprofits, and government agencies. The firm is known for its high level of expertise and efficiency in delivering impactful security assessments. Kevin is also the author of 'Hacking for Dummies,' a best-selling book on information security testing, which is currently in its fourth edition. Principle Logic, LLC prides itself on providing high-quality work and efficient services to secure repeat business.
The Solution
When it comes to Rapid7, Kevin attributes his high level of engagement and positive experiences to two things. The first is the level and quality of customer support: “I was on the phone with a vendor the other day, and at one point in the conversation I thought to myself, ‘this would already have been resolved if I was on the phone with Rapid7.’” He gives top marks for responsiveness and technical expertise, attesting that Rapid7 achieves first-call resolution nearly every time and takes support cases very seriously. The other reason why Kevin is an engaged Rapid7 customer is because of the products themselves. Another valuable aspect is the vulnerability validation component. “The Nexpose-Metasploit integration is very useful,” says Kevin. “I spent years working with various security products, and at the end of the day all I wanted was to know the severity of the vulnerability and whether it was exploitable using Metasploit. It was frustratingly difficult just to get a satisfying answer to such a seemingly simple question.” Given that Kevin strives to perform client engagements as effectively and efficiently as possible, these differentiators are key. “All I have is my knowledge and my time. I need to do high-quality work and I need to be efficient in order to secure repeat business,” he explains. Part of that, of course, is having the proper skills for the task at hand – and, as a security industry veteran, Kevin undeniably has a deep breadth of industry knowledge and expertise to pull from. The other part is having the right tools at your disposal. “I strive to minimize effort and maximize results,” he says. “There can’t be any inefficiencies in the assessment. Rapid7 helps me achieve that goal.”
Operational Impact
Quantitative Benefit
Related Case Studies.
Case Study
Factor-y S.r.l. – Establishes a cost-effective, security-rich development environment with SoftLayer technology
Factor-y S.r.l., a web portal developer, was faced with the challenge of migrating its development infrastructure to a reliable cloud services provider with highly responsive technical support. The company needed a solution that would not only provide a secure and reliable environment but also support its expansion by providing resources to create and deliver innovative offerings.
Case Study
UBM plc: Taking the pulse of the business and engaging employees with a far-reaching strategic transformation
UBM, a leading global events business, was undergoing a significant strategic transformation named 'Events First'. As part of this transformation, the company was preparing to complete the largest acquisition in its history - Advanstar, a US-based events and marketing services business valued at more than USD970m. The company faced the risk of human capital flight if it was unable to effectively engage top talent with the new strategic direction. UBM needed to make significant structural, process and systems changes, uniting its previously autonomous regional businesses. The challenge was to ensure all of its employees were engaged and aligned with the new future vision.
Case Study
Darwin Ecosystem: Accelerating discovery and insight through cutting-edge big data and cognitive technologies
Darwin Ecosystem was founded with a unique vision of harnessing chaos theory mathematics to uncover previously hidden connections in unstructured data. The company’s algorithms can look at all the data generated by any source (such as news, RSS feeds and Twitter), and analyze how a specific set of concepts within that data are evolving over time. This is particularly valuable in situations such as business and competitive intelligence, social research, brand monitoring, legal discovery, risk mitigation and even law enforcement. A common problem in these areas is that a regular web search will only turn up the all-time most popular answers to a given question – but what the expert researcher is actually interested in is the moment-tomoment evolution of the data available on that topic. Darwin’s algorithm is computationally intensive, and the sources of data it correlates can be vast. To bring its benefits to a larger commercial audience, Darwin needed to find a way to make it scale.
Case Study
Wittmann EDV-Systeme launches IT monitoring services
Small and medium-sized businesses often lack the know-how and resources required for thorough IT system monitoring. Wittmann EDV-Systeme wanted to launch a solution to plug the gap – enabling it to improve its own competitiveness and that of its customers. IT landscapes are becoming ever more complex and outsourcing is gaining popularity, IT systems must nonetheless remain easy-to-use and extremely reliable at all times. Automated, round-the-clock system monitoring therefore represents an immensely valuable proposition for companies: downtime for business-critical applications can be avoided, and IT systems remain available at all times.
Case Study
Zend accelerates, simplifies PHP development
Zend Technologies, a major contributor to the PHP open source community, needed to keep pace with emerging trends such as mobility, agile development, application lifecycle management and continuous delivery. The company needed to provide the right tools to the worldwide community of PHP developers. The challenge was to support enterprise-class capabilities from end to end, including mobile, compliance and security. The pace of business required developers to show results fast across a variety of devices without compromising quality or security.
Case Study
Delivering modern data protection with cloud scale backup from Cobalt Iron and IBM
Organizations are struggling to modernize their legacy data protection environments in the face of growing demands around new infrastructure, new applications, and budget consolidation. Virtualization and modern application development processes have significantly outgrown legacy backup architectures. In response, infrastructure teams have created multiple backup solution types to handle the varying SLAs (performance, scale, cost) required by their business sponsors. However, the sheer number and variety of solutions in this uncontrolled expansion creates huge amounts of work, threatening to overwhelm the IT team in many organizations. Today, developers may add new applications and virtual server instances by the hundreds per day without accounting for the restrictions of the existing backup infrastructure. They leverage the cloud for immediate compute and storage resources, yet rarely communicate succinctly with corporate IT to ensure that the appropriate data protection services are in place.
