Home / About / Media Coverage

Reuters

Venafi Encryption Director 6 Receives Security Industry’s Prestigious Global Excellence Award for Risk Management

“‘IT Risk Management is about tracking security, compliance and operational risks before they lead to costly breaches and outages,’ said Jeff Hudson, Venafi CEO. ‘Yet many IT governance policies fail to provide adequate management and access controls for their most important security assets: thousands of encryption keys and certificates. These have become the “keys to the kingdom” as they secure communications and authenticate systems. Yet security and compliance policies have failed to keep pace with the complexity of managing and controlling these mission-critical trust instruments.’”
Read More

March 21st, 2012
 

msnbc.com

Venafi Encryption Director 6 Receives Security Industry’s Prestigious Global Excellence Award for Risk Management

“Info Security Products Guide, the industry’s leading information security research and advisory guide, has named Venafi Encryption Director™ 6 (Director 6) the winner of the 2012 Global Excellence Awards in Risk Management. Venafi earned top honors in the risk management category due to its ability to provide out-of-the-box automated management capabilities for the widest range of digital certificate and encryption key technologies used by today’s enterprises including symmetric keys, SSH keys, asymmetric keys and digital certificates.”
Read More

March 21st, 2012
 

Formtek Blog

Digital Certificates: Compromised Keys Threaten a Foundation of Security

“A survey conducted by Venafi and Osterman Research found that 54 percent of organizations admit to being lax in their management of SSL certificates. 44 percent of companies manage the lifecycle of their SSL digital certificates with post-it notes and spreadsheets. But despite these problems, the real problem with SSL certificates isn’t on the website implementation side. The problem is with the companies that create and issue SSL certificates. Security breaches at certificate authorities (CA) like Verisign, Diginotar and Comodo have made headline news over the last months. Experts expect that other CA’s have also been compromised but have not gone public with the information.”
Read More

March 20th, 2012
 

Dark Reading

Web Encryption That Works

“Encryption brings with it administrative baggage. In addition to poorly managing encryption keys, operators of SSL-based websites often do a poor job managing the certificates themselves. Certificates can number in the thousands or even tens of thousands at businesses that run secured intranets, large e-commerce sites, or other websites handling sensitive data. When dealing with huge numbers of certificates, companies often spread out the responsibility across server and website owners, and that can quickly lead to chaos. ‘Big retailers and other companies often don’t even know how many certificates they have in place,’ says Jeff Hudson, CEO of Venafi, an encryption management vendor.”
Read More

March 7th, 2012
 

PenTestIT

Venafi Assessor: Search and analyze deployed digital certificates

“Venafi Assessor produces a series of reports that detail the security, operational and compliance risks derived from the data it collects. Additionally, Assessor provides remediation recommendations based on industry best practices and the aggregate experience of Venafi customers. Venafi Assessor is designed to help organizations develop and maintain best practices for critical security instruments. Using Assessor, IT and information security executives can rapidly discover critical SSL certificate, encryption key and certificate authority (CA) vulnerabilities.”
Read More

March 6th, 2012
 

IT Software Community

Security Headache No. 1: Where Are My Keys?

“Managing encryption keys, aka digital certificates, is shaping up as one of the toughest security-related challenges that enterprise IT faces right now, according to an Aetna Group official. Tim Tompkins, the insurance company’s manager of information security analytics, described a level of ‘encryption chaos’ that has engulfed corporations like his own. Especially in regulated industries like health insurance, he said, a company may end up relying on products from a wide variety of vendors, each with a ‘siloed strategy’ of its own. ‘There’s very little integration’ among these products, and the resulting complexity and inconsistencies end up creating their own security issues.”
Read More

March 2nd, 2012
 

Help Net Security

Locate and analyze deployed digital certificates for free

“Venafi announced the availability of Venafi Assessor, a downloadable, easy-to-install, free software solution that scans an organization ’s network to locate and analyze deployed digital certificates and the associated encryption keys. Recent Venafi Assessor analysis has found that organizations performing basic inventory assessments often discover three to five times more Secure Socket Layer (SSL) certificates than they expected to find on their network. As a result of these unknown and therefore unmanaged certificates, organizations are vulnerable to unplanned outages, security compromises and failed audits.”
Read More

March 2nd, 2012
 

SC Magazine

Rogue certificates ‘affecting businesses as much as authorities’

“Almost three-quarters of businesses have no capability to detect or locate a rogue certificate. More than half admitted to having an inaccurate or incomplete inventory of their SSL certificates, with 44 percent admitting that their digital certificates are manually managed with spreadsheets and reminder notes. Jeff Hudson, CEO of Venafi, said: ‘As this survey reveals, too many companies have inaccurate or incomplete data about their security assets. The unquantified and unmanaged risks these certificates and keys pose is significant, risks magnified through their increasingly pervasive use in corporate data centres, cloud-based systems and mobile devices.’”
Read More

March 2nd, 2012
 

MicroScope

Choosing the right security vendor

“Over the past few years, there has hardly been a week when there has not been a reported security breach, and as a result there is a growing awareness that the management of security has not kept pace with the changes in the way organisations are using technology. Before you jump at the next ‘silver bullet’, take time to talk to your customers and understand what challenges they are facing in areas such as key and certificate management. Then choose your partner carefully. Look for vendors with a mature solution that has already been deployed in large enterprises.”
Read More

March 1st, 2012
 

eWeek

RSA 2012: eWEEK Labs Picks the 21 Hottest Security Vendors

“The RSA Conference 2012 will set the security agenda for the year. More than 300 companies are at the expo, but I’ve picked the 21 stops I’m making while in San Francisco. Booth 1653′s Venafi makes enterprise-class digital key and certificate provisioning, discovery and monitoring tools, so you are less likely to see that classic ‘expired certificate’ message.”
Read More

February 29th, 2012