ConnectWise通过ProjectDiscovery提升了安全能力，将扫描时间从2天缩短至15分钟，并实现自动化漏洞检测和持续监控。该平台帮助公司快速响应安全事件，提高运营效率，并借助社区驱动的模板应对新兴威胁。 2025-3-4 18:59:56 Author: projectdiscovery.io(查看原文) 阅读量:2 收藏
Business impact using ProjectDiscovery
- Speeding time to detection:Scan times reduced from 2 days to 15 minutes for 10,000 assets
- Quickened incident response: Automated vulnerability detection accelerated impactful security event response.
- Improved security posture: Continuous monitoring and template-driven scanning across 63 AWS accounts.
- Boosted operational efficiency:Eliminated need for maintaining custom security tooling like Nuclei.
- Proven community value: Access to crowdsourced knowledge and rapid template generation for emerging threats
Introduction: Modern security challenges for MSP software providers
ConnectWise, established in 1982, provides business automation software that powers thousands of managed service providers (MSPs) globally. Like many software companies experiencing rapid growth through acquisition, ConnectWise manages a complex technology ecosystem. As their platform and attack surface expanded to over 43 products, so did the need for a more scalable, proactive security solution to detect trending vulnerabilities and manage their external exposures.
The Challenge: scaling security across a growing portfolio
Before implementing ProjectDiscovery's Enterprise tier, ConnectWise's security team faced significant scalability challenges with their previous solution. In addition to leveraging industry-leading enterprise security solutions and bug bounty programs, they heavily utilized custom scripting to address security gaps, often performing manual scans and managing fragmented workflows across multiple cloud providers.
Senior Director of Security Operations Jason Ferguson shared, "Our attack surface continued to grow and mutate as we rapidly acquired new products and technologies. Traditional tooling often left quick wins laying on the table." The team struggled with limited ability to manage rules at scale and unclear update cycles, while maintaining custom security scripts became increasingly burdensome as roles and responsibilities evolved.
The challenge intensified during the pandemic when the security landscape shifted dramatically. "The market was flooded with researchers utilizing vulnerability reporting and bug hunting for primary or secondary income," Ferguson explained. "This created an unprecedented scale of security research activity."
Seeking a more integrated approach, ConnectWise adopted ProjectDiscovery. Its automated scanning capabilities and customizable templates immediately demonstrated value.
“After getting the AWS role established, we had discovery up and running in minutes, and within two hours, all scans were completed with findings,” Ferguson noted.
ConnectWise chose ProjectDiscovery due to its strong open-source adoption and efficient scanning capabilities. Having previously relied on custom scripts and open-source tools like Nuclei, the team trusted ProjectDiscovery's reliability and active development. The platform's ability to create custom Nuclei templates and conduct targeted scans provided a tailored and scalable solution.
ConnectWise selected ProjectDiscovery over competitors like Tenable Cloud for its community-driven agility. With continuous Nuclei template updates, the team confidently identifies vulnerabilities as they emerge.
Implementation: An easy and straightforward integration experience
The onboarding process was remarkably efficient. Ferguson described how quickly they could segment their complex infrastructure.
"It took just five minutes to segment our 43+ products and 63 AWS accounts into our 4 core business pillars. The longest part was simply waiting for our cloud team to set up the AWS role," Ferguson stated.
Key implementation benefits included:
- Rapid deployment across business units
- Minimal configuration requirements
- Immediate visibility into security posture
- Automated asset discovery and scanning
Real-world impact: The ScreenConnect vulnerability response
ProjectDiscovery proved invaluable during a critical security incident involving ConnectWise's ScreenConnect product. The team used the platform to quickly write Nuclei templates for identifying impacted hosts at scale, independent of internal licensing and check-in systems, providing a deeper outside perspective and enabling continuous monitoring of worldwide patching progress. The ability to parallelize scanning improved performance dramatically, allowing ConnectWise to track vulnerable instances across multiple regions and coordinate response efforts with partners.
During the initial proof of concept alone, ProjectDiscovery identified several lower-severity issues that other traditional scanning tools had missed. When chained together, these issues presented a direct risk requiring immediate remediation.
Results: faster discovery, better coverage and community benefits
After adopting ProjectDiscovery, ConnectWise saw immediate improvements in their security operations:
- Scan times dropped from two days to 15 minutes for large asset groups
- Access to rapidly updated templates for emerging threats
- Automated template generation for new vulnerabilities
- Enhanced visibility across their entire infrastructure
"At ConnectWise, we value community. We invest heavily back into our industry space and ensure we contribute back to the overall success of our partners," Ferguson reflected. "Partnering with ProjectDiscovery, who shares those core beliefs of community value and security at scale, makes tooling decisions like this very simple."
Conclusion: A foundation for scalable security
ProjectDiscovery has become a bedrock of ConnectWise's security strategy. By automating vulnerability detection and leveraging community-driven security knowledge, ProjectDiscovery allows the ConnectWise team to focus on delivering value to customers while staying ahead of potential threats.
Ferguson emphasizes that the platform's impact extends beyond just tool replacement:
"Moving forward with generative AI and automation around template creation, ProjectDiscovery is helping close exposure gaps in a time when more CVEs have been raised than ever before. The ability to quickly identify trending vulnerabilities and respond to them increases our confidence significantly."
如有侵权请联系:admin#unsafe.sh