Wraith by NetCentrics - Multi-Cloud Security Solution

Wraith is a cloud-native detection and response solution that offers unparalleled visibility
and threat hunting capabilities across multi-cloud, hybrid and on-premise architectures.

With AI-enabled anomaly detection, collaboration tools and rapid deployment,
Wraith enables cyber protection teams to quickly neutralize cyber adversaries and secure the mission.

Wraith is your eyes across the clouds.

Why Wraith?

Rapid cloud adoption coupled with the complexities of multi-cloud environments and siloed security teams creates a critical visibility gap for many organizations.

Wraith addresses this challenge by providing comprehensive multi-terrain visibility, allowing security teams to monitor assets and activities across different Cloud
Service Providers (CSPs) with a single tool set.

This ensures a unified security posture and faster threat response across diverse and complex cloud environments.

View Technical Overview

What Makes Wraith Different:

Maximum Threat Visibility

Wraith seamlessly detects threats from disparate platforms and cloud environments, providing security teams an unparalleled unified view. This comprehensive visibility enables you to gain deep understanding of your cybersecurity posture and potential vulnerabilities and fortify your defenses against the most insidious threats.

Real-Time Threat Intelligence

By providing real-time updates on threats across multiple platforms and cloud environments, Wraith improves your situational awareness, allowing you to quickly identify and mitigate cloud vulnerabilities. Empower your security team to pinpoint otherwise invisible threats and move fast to mount effective threat response.

Take Our Cloud Security Survey

Wraith Solution Brief

Learn more about Wraith in our solution brief.

DOWNLOAD

Wraith White Paper

Learn how you can supercharge your cloud security.

DOWNLOAD

Frequently Asked Questions

Wraith is an integrated and tailored solution to meet your security challenges and not just another siloed tool in your security stack.

Wraith provides an engineered data pipeline that transforms ingested data into immediately valuable information. It also provides data connectors for remote cloud environments that are unavailable or do not exist in the Gov Cloud paired with engineered workbooks associated with the provided data collectors.

Wraith leverages a common data schema across different cyber terrains and environments to track threats by entity values.

Wraith provides a team and community collaboration environment, allowing operators/analysts to share threats, TTPs, analytics, and everything related to Hunt, Incident Response, and DoD DCO missions within and across the community teams.

Wraith provides an engineered secure networking solution utilizing a CASB to enable secure access from anywhere.

Most platforms on the market today focus on agent-based telemetry, which requires installing a compute endpoint. Wraith leverages cloud API/object data, which allows insight into objects that are not of type compute.

Wraith is tailored to meet your specific environments and tool capability requirements; large platforms are not as agile as Wraith.

Wraith is a DoD DCO mission-focused solution designed by operators for operators and has completed Operational Test and Evaluation (OT&E) with a positive fielding recommendation.

Other platforms offer security, but not with cross-cloud or multi-terrain telemetry capabilities.

Wraith is an integrated solution based on a fungible architecture with the ability to scale to meet the mission needs, from a 2x analyst team to multiple Cyber Protection Teams or an entire SOC.

Wraith is a fungible solution that is tailorable to each mission partner.

Wraith reduces the number of security tools in your environment which removes the need to spend on security tools and services in each environment. This also removes the need to have/train an expert for each environment.

Often, Wraith can lead to cloud savings by showing analysts precisely what resources are running in the environment. It is common to identify shadow cloud resources that are no longer necessary or unapproved and can be destroyed.

Moreover, tracking threats across multiple terrains and environments allows analysts and operators to reduce the time it takes to detect and respond to threats.

No, Wraith is an agentless solution. However, not all environments and missions are the same and when there is a need for agents, their telemetry can be ingested as part of a unified visibility. Wraith, out of the box, is integrated with Microsoft Defender family of components (endpoint, server, cloud and IoT).

Wraith provides the Collaboration & C2 node, which is available 24/7/365. This environment includes file sharing, chat services (RocketChat), documentation services (Wiki.js), and a code repository (GitLab) to allow analysts and operators from all teams to share and collaborate. We pride ourselves on our effort to foster a real community of detection.

Wraith is in the process of attaining an ATO and an IL4 FedRAMP accreditation. Future iterations will be IL5, IL6 and 6+ accredited.

Yes, it’s a simple process in most environments. A service account must be created to provide access to the log data. Wraith will leverage this account to fetch the logs on a scheduled basis.

Wraith has been integrated with Suricata, Fortisiem, Zeek, Gigamon, and Syslog. Wraith is flexible in that most integrations are accomplished in days versus weeks or months.

Currently, Wraith is an Azure solution that utilizes Microsoft Sentinel as its core SIEM & SOAR capability. However, it is data agnostic and can ingest data from multiple environments, such as AWS, GCP, Remote Azure, VMware vSphere, and traditional on-premises IT environments.

Wraith easily supports Microsoft Security Copilot utilization and Vectra AI integration.

Learn More

Request a Demo Request Content Partner With Us