❌

Reading view

There are new articles available, click to refresh the page.

μ„œλΉ„μŠ€λ‚˜μš°, 신원 λ³΄μ•ˆκΈ°μ—… 베자 인수 ν˜‘μƒΒ·Β·Β·10μ–΅ λ‹¬λŸ¬ 이상 규λͺ¨ 전망

μ„œλΉ„μŠ€λ‚˜μš°(ServiceNow)κ°€ 신원 λ³΄μ•ˆ μŠ€νƒ€νŠΈμ—… 베자(Veza)λ₯Ό 10μ–΅ λ‹¬λŸ¬ 이상에 μΈμˆ˜ν•˜κΈ° μœ„ν•œ 막바지 ν˜‘μƒμ„ μ§„ν–‰ 쀑인 κ²ƒμœΌλ‘œ μ•Œλ €μ‘Œλ‹€.

쑰직 μ „λ°˜μ— AI μ—μ΄μ „νŠΈλ₯Ό 배포 쀑인 μ„œλΉ„μŠ€λ‚˜μš° 고객 μž…μž₯μ—μ„œλŠ” 이번 μΈμˆ˜κ°€ μ€‘μš”ν•œ 곡백을 μ±„μš°λŠ” 역할을 ν•œλ‹€. 즉, AI μ—μ΄μ „νŠΈκ°€ μ–΄λ–€ 데이터에 μ ‘κ·Όν•˜κ³  μ–΄λ–€ μž‘μ—…μ„ μˆ˜ν–‰ν•  수 μžˆλŠ”μ§€λ₯Ό ν†΅μ œν•  수 있게 λœλ‹€. 베자의 κΈ°μˆ μ€ κΈ°μ—… μ‹œμŠ€ν…œ μ „λ°˜μ˜ κΆŒν•œ ꡬ쑰λ₯Ό λ§€ν•‘ν•΄ μ‚¬μš©μž, μ• ν”Œλ¦¬μΌ€μ΄μ…˜, AI μ—μ΄μ „νŠΈκ°€ μ–΄λ–€ 데이터에 μ ‘κ·Όν•  수 μžˆλŠ”μ§€ λͺ…ν™•ν•˜κ²Œ 보여쀀닀.

맀체 λ””μΈν¬λ©”μ΄μ…˜(The Information)은 ν•΄λ‹Ή 인수 건이 λ‹€μŒ μ£Ό λ°œν‘œλ  수 μžˆλ‹€κ³  λ³΄λ„ν–ˆλ‹€.

이번 ν˜‘μƒμ— μ•žμ„œ μ„œλΉ„μŠ€λ‚˜μš°λŠ” μ§€λ‚œ 3μ›” λ¬΄λΈŒμ›μŠ€(Moveworks)λ₯Ό 28μ–΅ 5천만 λ‹¬λŸ¬ 규λͺ¨μ— μΈμˆ˜ν•œ λ°” μžˆλ‹€. ν•΄λ‹Ή 인수둜 μ„œλΉ„μŠ€λ‚˜μš° ν”Œλž«νΌμ€ AI μ–΄μ‹œμŠ€ν„΄νŠΈμ™€ μ—”ν„°ν”„λΌμ΄μ¦ˆ 검색 κΈ°λŠ₯을 ν™•λ³΄ν–ˆλ‹€. 여기에 λ² μžκ°€ 더해지면, ν΄λΌμš°λ“œ μ„œλΉ„μŠ€Β·SaaS μ• ν”Œλ¦¬μΌ€μ΄μ…˜Β·λ‚΄λΆ€ μ‹œμŠ€ν…œ μ „λ°˜μ—μ„œ AIκ°€ 데이터λ₯Ό μ ‘κ·Ό 및 ν™œμš©ν•˜λŠ” 과정을 κ΄€λ¦¬ν•˜λŠ” 신원 λ³΄μ•ˆ 계측이 μƒˆλ‘­κ²Œ κ΅¬μΆ•λœλ‹€.

λ‹€λ§Œ μ„œλΉ„μŠ€λ‚˜μš°μ™€ λ² μžλŠ” 아직 곡식 μž…μž₯을 λ°νžˆμ§€ μ•Šμ•˜λ‹€.

기계 신원 관리

μ„œλΉ„μŠ€λ‚˜μš°λŠ” μ§€λ‚œ 3μ›”, ITΒ·HR·고객 μ„œλΉ„μŠ€Β·λ³΄μ•ˆ 운영 μ „λ°˜μ— 걸쳐 고객 ν™˜κ²½μ— 수천 개의 AI μ—μ΄μ „νŠΈλ₯Ό λ°°ν¬ν–ˆλ‹€κ³  λ°ν˜”λ‹€. μ΄λŸ¬ν•œ μ—μ΄μ „νŠΈκ°€ 점점 더 자율적 업무λ₯Ό μˆ˜ν–‰ν•˜λ©΄μ„œ, 기업은 이듀이 μ–΄λ–€ 데이터에 μ ‘κ·Όν•  수 μžˆλŠ”μ§€, 그리고 κ·Έ κΆŒν•œμ΄ λ³΄μ•ˆ μ •μ±…κ³Ό μΌμΉ˜ν•˜λŠ”μ§€ νŒŒμ•…ν•΄μ•Ό ν•œλ‹€λŠ” 압박을 λ°›κ³  μžˆλ‹€.

HFSλ¦¬μ„œμΉ˜μ˜ λΆ€λŒ€ν‘œ μ•…μƒ€νŠΈ ν‹°μ•ΌκΈ°λŠ” β€œμ„œλΉ„μŠ€λ‚˜μš°λŠ” AI μ—μ΄μ „νŠΈκ°€ λ‹¨μˆœνžˆ λŒ€ν™”ν•˜λŠ” μˆ˜μ€€μ„ λ„˜μ–΄ μ‹€μ œ λΉ„μ¦ˆλ‹ˆμŠ€ λ‚΄λΆ€μ—μ„œ 의미 μžˆλŠ” 행동을 μˆ˜ν–‰ν•˜λŠ” ν”Œλž«νΌμ„ κ΅¬μΆ•ν•˜λ € ν•˜κ³  μžˆλ‹€. λ¬΄λΈŒμ›μŠ€λŠ” κ°•λ ₯ν•œ μžλ™ν™” λ ˆμ΄μ–΄λ₯Ό μ œκ³΅ν–ˆμ§€λ§Œ, 신뒰와 κ±°λ²„λ„ŒμŠ€λŠ” μ—¬μ „νžˆ λΉ„μ–΄ μžˆλŠ” λΆ€λΆ„μ΄μ—ˆλ‹€. μ‹ μ›Β·κΆŒν•œΒ·μ ‘κ·Ό κ·œμΉ™μ΄ μ™„μ „νžˆ κ²¬κ³ ν•˜μ§€ μ•Šμ€ μƒνƒœμ—μ„œ μ‹€μ‹œκ°„ κΆŒν•œμ„ μ—μ΄μ „νŠΈμ— λ„˜κΈ°λŠ” 것은 μ–΄λ–€ 기업도 κ°μˆ˜ν•˜κΈ° μ–΄λ €μš΄ μœ„ν—˜β€μ΄λΌκ³  μ§„λ‹¨ν–ˆλ‹€.

λ² μžλŠ” λ³΄μ•ˆ 전문가듀이 β€˜λΉ„μΈκ°„ 신원(non-human identity) λ¬Έμ œβ€™λΌκ³  λΆ€λ₯΄λŠ” μ˜μ—­μ„ ν•΄κ²°ν•˜κ³  μžˆλ‹€. λ² μžμ— λ”°λ₯΄λ©΄, AI μ—μ΄μ „νŠΈμ™€ API 톡합, μžλ™ν™” μ›Œν¬ν”Œλ‘œμš°λŠ” λͺ¨λ‘ 관리가 ν•„μš”ν•œ μ„œλΉ„μŠ€ 계정과 토큰을 λ§Œλ“€μ–΄λ‚΄λ©°, λŒ€λΆ€λΆ„μ˜ κΈ°μ—…μ—μ„œλŠ” μ΄λŸ¬ν•œ 기계 신원이 인간 μ‚¬μš©μžλ³΄λ‹€ 훨씬 λ§Žμ€ 수λ₯Ό μ°¨μ§€ν•œλ‹€.

베자의 β€˜κΆŒν•œ κ·Έλž˜ν”„(Authorization Graph)’ κΈ°μˆ μ€ μ‹œμŠ€ν…œ μ „λ°˜μ˜ κΆŒν•œμ„ λ§€ν•‘ν•΄ λ‹¨μˆœνžˆ β€˜λˆ„κ°€ μ ‘κ·Όν•  수 μžˆλŠ”κ°€β€™κ°€ μ•„λ‹ˆλΌ, β€˜μ ‘κ·Ό κΆŒν•œμœΌλ‘œ μ‹€μ œ μ–΄λ–€ 행동을 μˆ˜ν–‰ν•  수 μžˆλŠ”κ°€β€™λ₯Ό 보여쀀닀. λ² μžλŠ” λΈ”λž™μŠ€ν†€, μ΅μŠ€ν”Όλ””μ•„, μ›Œν¬λ°μ΄ λ“± μ£Όμš” κ³ κ°μ‚¬μ˜ 200μ–΅ 건이 λ„˜λŠ” κΆŒν•œμ„ κ΄€λ¦¬ν•˜κ³  μžˆλ‹€. 2020λ…„ 섀립 이후 총 2μ–΅ 3,500만 λ‹¬λŸ¬λ₯Ό νˆ¬μžλ°›μ•˜μœΌλ©°, 2025λ…„ 4μ›” κΈ°μ€€ μž„μ§μ› μˆ˜λŠ” 190λͺ… 이상이닀.

ν‹°μ•ΌκΈ°λŠ” κΈ°μ‘΄ 신원 및 μ ‘κ·Ό 관리(IAM) 도ꡬ가 인간 μ‚¬μš©μž 계정을 μ€‘μ‹¬μœΌλ‘œ 섀계돼 기계 신원, API ν‚€, 자율 μ—μ΄μ „νŠΈμ˜ μ‹€μ‹œκ°„ νŒλ‹¨ μ²˜λ¦¬μ—λŠ” ν•œκ³„κ°€ μžˆλ‹€κ³  μ§€μ ν–ˆλ‹€. κ·ΈλŠ” β€œμ΄λ‘œ 인해 κΆŒν•œμ˜ λ¬΄λΆ„λ³„ν•œ ν™•μ‚°, μ‹œμŠ€ν…œ κ°„ μ ‘κ·Ό 경둜의 μ‚¬κ°μ§€λŒ€κ°€ λ°œμƒν•œλ‹€β€λΌκ³  μ„€λͺ…ν–ˆλ‹€.

ν•œνŽΈ μ–‘μ‚¬λŠ” 이미 ν˜‘λ ₯ 관계λ₯Ό λ§Ίκ³  μžˆλ‹€. μ„œλΉ„μŠ€λ‚˜μš° 벀처슀(ServiceNow Ventures)λŠ” 2023λ…„ 8μ›” 캐피털원 λ²€μ²˜μŠ€μ™€ ν•¨κ»˜ λ² μžμ— νˆ¬μžν•œ λ°” 있으며, 보도에 λ”°λ₯΄λ©΄ μ„œλΉ„μŠ€λ‚˜μš°μ™€ λ² μžλŠ” 250곳이 λ„˜λŠ” 곡동 고객을 λ³΄μœ ν•˜κ³  μžˆλ‹€.

고객 톡합 과제

이번 인수둜 인해 두 μ‹œμŠ€ν…œμ΄ μ—°λ™λ˜λŠ” λ°©μ‹μ—λŠ” μ€‘λŒ€ν•œ λ³€ν™”κ°€ λ‚˜νƒ€λ‚  수 μžˆλ‹€. ν˜„μž¬ μ„œλΉ„μŠ€λ‚˜μš°μ™€ 베자λ₯Ό ν•¨κ»˜ μ‚¬μš©ν•˜λŠ” 기업듀은 두 μ‹œμŠ€ν…œμ„ λ³„λ„λ‘œ μš΄μ˜ν•˜κ³  μžˆμ§€λ§Œ, 톡합이 이뀄지면 μ„œλΉ„μŠ€λ‚˜μš°μ˜ AI μ—μ΄μ „νŠΈκ°€ 베자의 κΆŒν•œ μΈν…”λ¦¬μ „μŠ€λ₯Ό 기반으둜 μ ‘κ·Ό 정책을 직접 μ‘°νšŒν•˜κ³  μ μš©ν•  수 있게 되며, 고객이 λ³„λ„μ˜ μ»€μŠ€ν…€ 연동을 ꡬ좕할 ν•„μš”κ°€ μ—†μ–΄μ§€κ²Œ λœλ‹€.

티야기에 λ”°λ₯΄λ©΄ μ΄λŸ¬ν•œ ν†΅ν•©μ—λŠ” μ‹œκ°„μ΄ ν•„μš”ν•  전망이닀. κ·ΈλŠ” β€œμ„œλΉ„μŠ€λ‚˜μš°λŠ” 이미 κ±°λŒ€ν•˜κ³  λ³΅μž‘ν•œ μ‹œμŠ€ν…œμ΄λ©°, 여기에 μ™„μ „ν•œ 신원 λ³΄μ•ˆ 엔진을 μΆ”κ°€ν•˜λŠ” μž‘μ—…μ€ μ¦‰μ‹œ 적용될 수 μžˆλŠ” ν˜•νƒœλŠ” 아닐 것”이라고 λ§ν–ˆλ‹€. λ˜ν•œ 고객은 두 ν”Œλž«νΌμ΄ ν†΅ν•©λ˜λ©΄μ„œ λΌμ΄μ„ μŠ€ 체계가 λ³€κ²½λ˜κ³  μ‹ κ·œ λͺ¨λ“ˆμ΄ λ„μž…λ  κ°€λŠ₯성을 염두에 둬야 ν•œλ‹€.

μ„œλΉ„μŠ€λ‚˜μš° 없이 베자만 μ‚¬μš©ν•˜λŠ” 기업은 λ² μžκ°€ λ…λ¦½ν˜• μ œν’ˆμœΌλ‘œ 계속 μ œκ³΅λ μ§€ νŒŒμ•…ν•  ν•„μš”κ°€ μžˆλ‹€. λ°˜λŒ€λ‘œ μ„œλΉ„μŠ€λ‚˜μš°μ™€ ν•¨κ»˜ λ‹€λ₯Έ 신원 관리 μ œν’ˆμ„ μ‚¬μš©ν•˜λŠ” 기업은 κΈ°μ‘΄ 도ꡬ가 계속 μ§€μ›λ˜λŠ”μ§€, μ•„λ‹ˆλ©΄ μ„œλΉ„μŠ€λ‚˜μš°κ°€ μžμ‚¬ 톡합 μŠ€νƒμœΌλ‘œμ˜ μ „ν™˜μ„ μœ λ„ν• μ§€ 확인해야 ν•œλ‹€.

μ„œλΉ„μŠ€λ‚˜μš°λŠ” μ§€λ‚œ 5μ›” β€˜λ†€λ¦¬μ§€ 2025’ ν–‰μ‚¬μ—μ„œ λ³΄μ•ˆ 및 리슀크 관리λ₯Ό μœ„ν•œ AI μ—μ΄μ „νŠΈλ₯Ό κ³΅κ°œν•˜λ©° 이λ₯Ό 자율적 κΈ°μ—… λ°©μ–΄ λ„κ΅¬λ‘œ μ œμ‹œν–ˆλ‹€. λ² μžλŠ” μ΄λŸ¬ν•œ λ³΄μ•ˆ μ—μ΄μ „νŠΈκ°€ λ‹€μ–‘ν•œ μ‹œμŠ€ν…œμ—μ„œ μœ„ν˜‘μ„ μ•ˆμ „ν•˜κ²Œ μ‘°μ‚¬ν•˜κ³  λŒ€μ‘ν•˜λŠ” 데 ν•„μš”ν•œ κΆŒν•œ μ œμ–΄ κΈ°λŠ₯을 μ œκ³΅ν•˜κ²Œ λœλ‹€.

ν‹°μ•ΌκΈ°λŠ” λ² μžκ°€ μ ‘κ·Ό κΆŒν•œμ„ β€˜κ΄€κ³„ 기반 λ¬Έμ œβ€™λ‘œ 바라본닀고 μ„€λͺ…ν–ˆλ‹€. 즉, μ‹ μ›Β·κΆŒν•œΒ·λ°μ΄ν„°μ˜ μ—°κ²° ꡬ쑰λ₯Ό 뢄석해 이둠적인 κΆŒν•œμ΄ μ•„λ‹ˆλΌ μ‹€μ œ 효과적인 μ ‘κ·Ό κΆŒν•œμ„ λ³΄μ—¬μ€€λ‹€λŠ” μ˜λ―Έλ‹€.

μ‹œμž₯ 영ν–₯

이번 μΈμˆ˜κ°€ μ„±μ‚¬λ˜λ©΄ μ„œλΉ„μŠ€λ‚˜μš°λŠ” AI 기반 μ—”ν„°ν”„λΌμ΄μ¦ˆ ν”Œλž«νΌμ„ κ΅¬μΆ•ν•˜λ €λŠ” κ²½μŸμ‚¬μ™€ 비ꡐ해 더 완성도 높은 기술 μŠ€νƒμ„ ν™•λ³΄ν•˜κ²Œ λœλ‹€. μ„ΈμΌμ¦ˆν¬μŠ€, λ§ˆμ΄ν¬λ‘œμ†Œν”„νŠΈ(MS), 였라클 λ“± μ£Όμš” 기업듀도 AI μ—μ΄μ „νŠΈλ₯Ό μ œκ³΅ν•˜κ³  μžˆμ§€λ§Œ, ν‹°μ•ΌκΈ°λŠ” ν”„λ‘ νŠΈμ—”λ“œ μžλ™ν™”μ™€ 신원 λ³΄μ•ˆμ„ μ„œλΉ„μŠ€λ‚˜μš°Β·λ¬΄λΈŒμ›μŠ€Β·λ² μž μ‘°ν•©μ²˜λŸΌ κ²°ν•©ν•œ μ‚¬λ‘€λŠ” 아직 μ—†μ—ˆλ‹€κ³  μ–ΈκΈ‰ν–ˆλ‹€.

ν‹°μ•ΌκΈ°λŠ” β€œμ΄λ²ˆ μΈμˆ˜λŠ” μ „λ¬Έ μ˜μ—­μœΌλ‘œ λ‚¨μ•„μžˆλ˜ κΆŒν•œ 관리 μΈν…”λ¦¬μ „μŠ€λ₯Ό λŒ€κ·œλͺ¨ μ—”ν„°ν”„λΌμ΄μ¦ˆ ν”Œλž«νΌ λ‚΄λΆ€λ‘œ λŒμ–΄λ“€μ΄λŠ” 변화라 신원 λ³΄μ•ˆ μ‹œμž₯의 νŒλ„λ₯Ό 흔듀 수 μžˆλ‹€β€λΌκ³  λΆ„μ„ν–ˆλ‹€. κ·ΈλŠ” 사이버아크, μ„ΈμΌν¬μΈνŠΈ, μ˜₯νƒ€μ²˜λŸΌ λ…λ¦½μ μœΌλ‘œ μš΄μ˜λ˜λŠ” 신원 λ³΄μ•ˆ 기업이 ν–₯ν›„ ν”Œλž«νΌ νŒŒνŠΈλ„ˆμ‹­μ΄λ‚˜ 인수 λŒ€μƒμ„ λͺ¨μƒ‰ν•΄μ•Ό ν•˜λŠ” 압박을 받을 수 μžˆλ‹€κ³  μ „λ§ν–ˆλ‹€.
dl-ciokorea@foundryco.com

ServiceNow is in talks to buy identity security firm Veza for over $1 billion: report

ServiceNow is reportedly in advanced talks to acquire Veza, an identity security startup, for more than $1 billion.

For ServiceNow customers deploying AI agents across their organizations, the acquisition would address a critical gap: controlling what those agents can access and do. Veza’s technology maps permissions across enterprise systems, showing exactly which users, applications, and AI agents have access to what data.

The deal could be announced next week, The Information reported.

The deal would follow ServiceNow’s $2.85 billion acquisition of Moveworks, announced in March. That purchase brought AI assistants and enterprise search capabilities to ServiceNow’s platform. Adding Veza would provide the identity security layer needed to govern those AI systems as they access data across cloud services, SaaS applications, and internal systems.

ServiceNow and Veza did not immediately respond to requests for comment.

Managing machine identities

ServiceNow said in March that it deployed thousands of AI agents for customers across IT, HR, customer service, and security operations. As these agents take on more autonomous tasks, enterprises face mounting pressure to understand what they can access and whether those permissions align with security policies.

β€œServiceNow is trying to build an enterprise platform where AI agents don’t just chat, but actually take meaningful actions inside the business,” said Akshat Tyagi, associate practice leader at HFS Research. β€œMoveworks gave them a strong automation layer, but trust and governance were the missing pieces. Handing over real-time authority to agents unless identity, permissions, and access rules are rock solid is a bluff no enterprise wants to play.”

Veza addresses what security experts call the non-human identity problem. Every AI agent, API integration, and automated workflow creates service accounts and tokens that need management, according to the company. In most enterprises, these machine identities far outnumber human users.

Veza’s Authorization Graph technology maps permissions across systems to show not just who has access, but what they can effectively do with that access. According to its website, the company manages more than 20 billion permissions for customers, including Blackstone, Expedia, and Workday. Veza has raised $235 million since its inception in 2020 and employed more than 190 people as of April 2025.

Tyagi said existing identity and access management tools were designed for human accounts but struggle with machine identities, API keys, and autonomous agents making real-time decisions. β€œThis creates blind spots around privilege sprawl and cross-system access paths,” he said.

The two companies already work together. ServiceNow Ventures invested in Veza in August 2023 alongside Capital One Ventures. The companies have more than 250 joint customers, the report added.

Customer integration questions

For those joint customers, the acquisition would mean significant changes in how the two systems work together. Enterprises using both ServiceNow and Veza today run them as separate systems. Integration would allow ServiceNow’s AI agents to natively query and enforce access policies based on Veza’s permission intelligence, without customers building custom connections.

That integration will take time, according to Tyagi. β€œServiceNow is already a big and complex system, and adding a full identity security engine won’t be instant plug-and-play,” he said. Customers should expect changes to licensing and the introduction of new modules as the two platforms merge.

Organizations using Veza without ServiceNow will want clarity on whether the product remains available as a standalone offering. Those using ServiceNow with other identity vendors will need to know if their existing tools remain supported or if ServiceNow will push customers toward its own integrated stack.

ServiceNow unveiled AI agents for security and risk management at its Knowledge 2025 conference in May, positioning them as tools for autonomous enterprise defense. Veza would provide the authorization controls those security agents need to safely investigate and remediate threats across systems.

Veza treats access as a relationship problem, connecting identities, permissions, and data to show effective access rather than just theoretical permissions, according to Tyagi.

Market implications

The acquisition would give ServiceNow a more complete offering against rivals building AI-powered enterprise platforms. Salesforce, Microsoft, and Oracle all offer AI agents, but none had combined front-end automation with identity security in the way ServiceNow was attempting with Moveworks and Veza, according to Tyagi.

β€œThis deal can shake up the identity security landscape because it pulls deep authorization intelligence into a major enterprise platform instead of keeping it as a standalone specialty,” Tyagi said. Standalone identity vendors like CyberArk, SailPoint, and Okta may face pressure to find their own platform partnerships or acquisition targets, he said.

Seattle’s Parse Biosciences to be acquired by Qiagen for $225M

Parse Biosciences co-founders are CTO Charles Roco and CEO Alex Rosenberg. (Parse Photo)

Seattle’s Parse Biosciences is teed up for an acquisition by Qiagen, a Netherlands-based holding company, in a $225 million cash deal announced this week.

The transaction is expected to close in December.

Parse was co-founded in 2018 by Alex Rosenberg, who was a University of Washington postdoctoral fellow at the time, and Charles Roco, who was a UW graduate student. The company was an early entrant in the nascent field of single-cell RNA sequencing.

Rosenberg and his colleagues discovered a new way to profile RNAs while working in the lab ofΒ UW synthetic biology professor Georg Seelig. The business initially launched as Split Biosciences, later changing its name and growing to 110 employees.

Parse has raised more than $50 million from investors, including a $41.5 million Series B round announced in 2022.

Parse launched its first products in 2021 and currently serves 3,000 customers in more than 40 countries. The company is expected to add about $40 million in sales to Qiagen’s 2026 fiscal year.

Parse stated on its website that it will operate as a Qiagen subsidiary and β€œwill maintain full operations in our Seattle headquarters and all other locations around the world.”

There’s a vast range of research questions that RNA profiling can help answer. Understanding which RNAs are present in a cell gives scientists a read-out of active genes. That helps distinguish different cell types, for instance in a blood sample or a petri dish of stem cells turning into heart cells.

Parse touts the accessibility of its technology, which does not require specialized lab equipment to use.

β€œAs our team joins Qiagen, we want to accelerate that mission and extend the reach of our technology to more customers around the world,” said CEO Rosenberg in a statement, adding that Qiagen’s global infrastructure makes it β€œan ideal partner for our next stage of growth.”

Qiagen has developed technologies to isolate and analyze DNA, RNA and proteins from sources including blood, tissue and other materials. The company has about 5,700 employees in 35 locations. It serves 500,000 customers globally.

The acquisition is subject to clearance under the U.S. Hart-Scott-Rodino Antitrust Improvements Act and other conditions.

Bitsight buys dark web security specialist Cybersixgill for $115M

More consolidation is afoot in the world of cybersecurity. Bitsight, a cybersecurity startup last valued at $2.4 billion when ratings firm Moody’s took a stake in the business and became its largest shareholder in 2021, is acquiring Cybersixgill for $115 million. Boston-based Bitsight’s focus is cyber risk management. It works with enterprises to assess their […]

3 Approaches to Security Testing for Third Parties

What You Should Consider Before Launching a Security Test for Your Third Parties and Vendor

A paradox of cybersecurity’s function in business is that businesses provide value by creatively sharing and using information, but cybersecurity benefits from less sharing and access to data.Β 

This holds doubly true in the area of third-party security for large organizations that must adhere to stricter regulations, such as banks and government agencies. It is nearly impossible to conduct business without frequently and openly sharing valuable information with, or via, third parties.Β 

Drug developers rely on clinical research partners for essential data. Banks exchange information with credit agencies, other banks, regulators and more. All of this drives software development and infrastructure changes constantly, and some percentage of those changes introduce security vulnerabilities that are detected late in the process, which poses risk for the organizations.Β 

Many feel that they get more security β€œbang-for-the-buck” through third-party testingβ€”testing the software of others. A 2022 study by the Ponemon Institute found that while 75% of respondents are concerned about the risk of ransomware linked to third parties, only 36% of organizations evaluate their own security and privacy practices. An earlier 2019 Ponemon study found that if it were a third party that caused a data breach, the cost increased by more than $370,000 (raising it to $4.3 million). Shoring up third-party defenses clearly has benefits for multiple parties (and your customers).

How Synack Customers Test Third Parties

Synack has seen customers try different approaches for testing third parties. Tests are either 1) encouraged, 2) required or 3) coordinated.Β 

In the first model, third parties are strongly encouraged to get a security test from Synack and share the results with their partner, usually the larger of the two companies. It’s not forced; ultimately, it’s up to the third party to decide if their relationship benefits from a security test.Β 

In the second model, security testing is a requirement for a relationship to be contractually completed. Finally, the Coordinated Testing model is the one Synack sees growing the fastest. In this model, the larger company with several third parties to test purchases tests on behalf of other companies and mandates testing. Usually, they specify the testing intensity as well, by choosing a basic Synack test or a more comprehensive offering. This secures testing resources and makes it easier to share data via a testing platform built for it.Β 

Issues to Consider when Testing Third Parties

Whichever model you prefer, there are several things to consider. First, what is the chargeback model, if any, for security tests? Does the third party pay, the first party or someone else? Does the payment happen up front or in a later, internal accounting?Β  The latter helps execute testing faster, which is ultimately what many companies want to reduce risk earlier.

Next, what legal agreements need to be in place? All Synack customers have clear contracts with Synack that cover testing. In some cases, an identical contract is needed with a third party, but more frequently, it’s a simpler agreement. Consult with your legal team to find the simplest but most effective way to expand testing on your assets, regardless of where they reside.Β 

Finally, there is information sharing. Do vulnerabilities found on a third party get reported to the primary party? In most cases, the primary party simply wants to know that vulnerabilities are not present, which can be done with patch verification reports. Synack’s robust role-based access control system and reporting allow for any choice along this spectrum to be securely shared according to the wishes of the companies. Information can be shared via a final report, access to the Synack Portal (with real-time information about testing efforts and results) or both.

Whatever you choose, third-party security testing to clean up potential vulnerabilities advances the ultimate goal for many companies: safer users and data.Β 

The post 3 Approaches to Security Testing for Third Parties appeared first on Synack.

❌