The First-ever Zero Trust Access Orchestration Platform - by SAFE-t

Short description

Fully transparent and simple to deploy, Safe-T provides an innovative and unique network-centric ability to implement ZTNA within corporate networks.

About you

Safe-T is a cybersecurity industry leader and developer of the world’s first-ever zero trust access orchestration platform. Safe-T’s innovative zero trust access solutions mitigate attacks on enterprise business-critical services and sensitive data, while ensuring uninterrupted business continuity.
Safe-T’s nextgen cloud and on-premises solutions ensure that all organizational access use cases, both incoming and outgoing, are fully secured, according to the company’s “validate first, access later” philosophy. No-one is trusted by default from either inside or outside the network, and verification is required from every identity wishing to gain access to resources on the network or in the cloud.
Safe-T is trusted by world-leading organizations (Lavego, Hapoalim Bank, Strauss, IDF, Philips), tier 1 partners (Fujitsu, Accenture, Edvance, DataGroupIT), and recognized by top analysts (Gartner, Forrester, Quadrant).

Solution description

Fully transparent and simple to deploy, Safe-T provides an innovative and unique network-centric ability to implement ZTNA within corporate networks. Working side-by-side and in conjunction with all access points (VPNs and firewalls), identity security solutions and application services, Safe-T’s ZTNA enables seamless integration across all legacy infrastructure and authentication services.

With deep understanding of the need for efficient ZTNA solutions that address all remote access scenarios and requirements, Safe-T has created the first ever Zero Trust Access Orchestration Platform, supporting the following access scenarios:

Remote access users (non-VPN)
ZoneZero® enables organizations to implement ZTNA and provide secure and transparent access to any internal application, service, and data in parallel or in replacement of an existing VPN. Based on patented reverse-access technology, ZoneZero® is a clientless solution, eliminating the need to open incoming ports in an organization’s firewall for seamless, effective, and secure operations.

VPN users
Powered by patented reverse-access technology, ZoneZero® uniquely enables ZTNA on existing VPN infrastructures through application-layer policy monitoring and enforcement, MFA integration to any application or service for continuous authentication with MFA, and true separation of the data plane and control plain – all on top of existing infrastructures.

Internal network users
ZoneZero® also operates as a ZTNA solution for internal users, providing identity-based segmentation and multi-factor authentication for any internal application for secure access control in addition to supporting both non-web protocols and legacy infrastructure. With ZoneZero®, organizations can easily integrate multi-factor authentication and continuous identity verification for all applications.

Benefits

One Platform, Infinite Benefits

Effective Zero-Trust Network Access (ZTNA)
Controlled access and authentication for all user types and access scenarios

Seamless Integration & Rapid Deployment
Central clientless deployment on existing technologies, with a transparent UX

Optimized Deployment & Ownership Costs
Reduced maintenance and integration costs and optimized usage

Usage

ZoneZero® transforms the way organizations grant secure access to remote users. By uniquely separating the authentication layer from the access layer, application-layer access is granted to authenticated users only. As a result, access-granted users are only able to connect to applications and services according to their identity. This greatly reduces the chances of lateral movement which in turn, mitigates risk.
SDP Concepts for ZoneZero®
With SDP Concepts for ZoneZero, organizations can implement Zero Trust Network Access while at the same time providing secure and transparent access to any internal application, service or data source either in parallel to, or instead of, an existing VPN.
Device Agnostic
ZoneZero® is a clientless solution built and designed to support Bring Your Own Device (BYOD) and allow users to connect from any end-point – mobile, tablet, PC, etc.

Any entity, every source
ZoneZero® offers secure and transparent access for all types of entities (people, applications, connected devices) to any internal application, service or data source, including generic TCP protocols, legacy applications, thin/fat client applications, HTTP/S, SMTP, SFTP, SSH, APIs, RDP, SMB, and more.
Patented Technology
ZoneZero® implements Safe-T’s patented reverse-access (outbound) technology which eliminates the need to open incoming ports in the organization’s firewall.
Better together
ZoneZero transcends this common conundrum, revolutionizing VPN-based remote access by providing true separation of the data and control plane, application layer policy monitoring & enforcement, and MFA integration, to any application or service, all on top of existing VPN infrastructureds.

Fully transparent and simple to deploy, ZoneZero provides a uniquely innovative and network-centric approach to implementing ZTNA within corporate networks. Working in conjunction with the VPN infrastructure, ZoneZero enables seamless integration across all legacy infrastructures and authentication services.

The first ever solution to fully integrate ZTNA and SDP Concepts into VPNs
Due to its unique parameters, with ZoneZero, organizations reap all the benefits of ZTNA and SDP with zero disruption to existing infrastructures and no loss of initial investment.

THE ZoneZero Advantage

VPN Agnostic
Works with all commercial VPN solutions, through a simple integration.

Device Agnostic
A clientless solution designed to support Bring Your Own Device (BYOD) and enable users to connect from any end-point – mobile, tablet, PC, etc.

Any entity, every source
Enables secure and transparent access for all types of entities (people, applications, connected devices) to any internal application, service or data source, including generic TCP protocols, legacy applications, thin/fat client applications, HTTP/S, SMTP, SFTP, SSH, APIs, RDP, SMB, and more.
Application-Level Access
Disconnects VPN users from the network, ensuring application-level access only, rather than network level (layer 2) access. This is supported for tunnel-based VPNs.
Per-application MFA
Sends the user an MFA request per application, enabling ZoneZero to control which application requires a secondary MFA, and which does not. MFA is supported for every application and/or service deployed after the VPN. This enables the implementation of continuous authentication for all users accessing the service via the VPN.
ZoneZero is a ZTNA solution designed to enable customers to easily integrate and deploy a centralized MFA solution (Synchronic MFA, Push messaging, Biometric, instant messaging, REST API) and identity awareness for all corporate applications, both web and non-web.

The first ever solution to fully integrate ZTNA and MFA Concepts for internal network users
Due to its unique parameters, with ZoneZero, organizations reap all the benefits of ZTNA and MFA with zero disruption to existing infrastructures and no loss of initial investment.

ZoneZero provides identity-based segmentation and MFA for any and every internal application for secure access control, non-web protocols and legacy infrastructure. With ZoneZero, organizations can easily integrate MFA and continuous identity verification for all applications.
The ZoneZero® advantage
With ZoneZero MFA, every request from any user/application to every application invokes an MFA action. For example, once a push notification is sent to the accessing user or IT administrator for an access attempt, ZoneZero prevents access to the resource, until the MFA responds.