Huntress Says Nine MSP Vendors Pledged $75,000 to DIVD
Summary
Huntress said nine vendors pledged a combined $75,000 to support DIVD after Huntress announced a $100,000 donation. Vendors also discussed transparency, responsible disclosure and a planned vulnerability disclosure program workshop.
Key points
- Huntress announced a $100,000 donation to the Dutch Institute for Vulnerability Disclosure (DIVD); it said nine vendors pledged another $75,000 combined.
- Vendor representatives said support for DIVD could help researchers responsibly disclose vulnerabilities in products used by MSPs.
- Axcient described security testing, security-focused development and aggressive resolution SLAs for security issues as part of its approach.
- Unveil Security Group recommended identifying gaps in logging and network monitoring and monitoring internet-exposed services and critical internal systems.
- OITVoip said it would work with CNWR’s Jason Slagle on a vulnerability disclosure program workshop, sponsored by Huntress.
Article Details
- Event Type
- Cybersecurity community funding and collaboration initiative supporting the Dutch Institute for Vulnerability Disclosure (DIVD).
- Impact
- Huntress announced a $100,000 donation to DIVD, and nine vendors pledged a combined $75,000. The initiative supports responsible vulnerability disclosure and aims to help identify software security issues before they affect MSPs and their customers.
People
Ben NowackyAxcient's SVP of Products; discussed the company's support for the initiative and its security practices.Damien StevensCEO of Servosity; discussed the company's partnership with DIVD and Huntress.Jason SlaglePresident of Technology at CNWR, Inc.; plans to create a Vulnerability Disclosure Program workshop with Ray Orsini.Jeremy YoungBlumira's Director of Partner Strategy; discussed the company's support for DIVD.Joe ClappPresident of Unveil Security Group; discussed the company's support for responsible vulnerability disclosure.Kelvin TegelaarCTO and co-owner at Lime Networks; commented on the initiative's potential to help security experts identify software issues before major incidents.Marc InderheesAppgate's Senior Director of MSP Channel Sales; discussed the company's support for DIVD.Michael FranceManaging Partner at Taylor Business Group; discussed the company's support for DIVD.Rachel BishopAuthor of the article about the DIVD funding initiative.Ray OrsiniCEO of OITVoip; discussed the initiative and said he would work with Jason Slagle to create a Vulnerability Disclosure Program workshop.
Vendors
AppgateMarc Inderhees, Senior Director of MSP Channel Sales (Appgate): We are thrilled to have an opportunity to support DIVD. It’s critical that vendors invest in the community. MSPs are the first line of defense and need ourAxcientBen Nowacky, SVP of Products (Axcient): Security in a silo can never be effective. Cybercriminals have us in their sights, and we believe in the power of collaboration and transparency as potent weapons against them.BlumiraJeremy Young, Director of Partner Strategy (Blumira): The perfect cybersecurity program can be derailed in an instant by the right vulnerability. As vendors providing software to the SMBs and MSPs who are the engine ofHuntressEver since we announced that we were donating $100,000 to the Dutch Institute for Vulnerability Disclosure (DIVD), things have been a bit hectic around here at Huntress.OITVoipRay Orsini, CEO (OITVoip): Just like MSPs have a responsibility to their clients, I believe we vendors have a responsibility to the MSPs we serve. However, many of us were held back due to not having the internalServosityDamien Stevens, CEO (Servosity): I’m excited to partner with DIVD and Huntress in the fight against cybercrime. MSPs know that a thoroughly tested and immutable backup is their last line of defense in the event of anTaylor Business GroupMichael France, Managing Partner (Taylor Business Group): There are many bounty programs by manufacturers to incent ethical hackers. By supporting DIVD, we feel more money will get to the ethical hackers to identify theUnveil Security GroupJoe Clapp, President (Unveil Security Group): Vendor neutrality is core to the Unveil corporate ethics. We had been looking for a vulnerability disclosure organization that mirrored our own ethics. Additionally, Unveil
Industries
CybersecurityBecky: What do you think MSP vendors should be doing to make cybersecurity safer for their partners in 2022?Managed service providerslining when the end result is customer down time, data theft, or damaged reputations. For Managed Service Providers with tens to hundreds (or even thousands) of clients, the stakes are even higher. In this MSP