blog

C3M and AppSec Phoenix Agree on Far-Reaching Technology Partnership

Integration of platforms provides comprehensive risk status and vulnerability management for any enterprise in the cloud

27 September 2021, San Francisco, CAC3M, a leader in Cloud Security Posture Management (CSPM) and Cloud Identity and Entitlement Management (CIEM) has today announced a new global technology partnership with AppSec Phoenix, the provider of SMART risk-based vulnerability management. The integration of C3M’s Cloud Control and AppSec Phoenix Platform will result in a complementary platform that benefits enterprises by providing end to end, development to deployment, visibility and management of cloud vulnerabilities, all in a single pane.  

The agreement will see the technological integration of both unique platforms, the sharing of information and knowledge moving forward and also a greater collaboration between the companies. C3M and AppSec Phoenix will become more aligned strategically in their go-to market, and messaging to customers, as a joint offering further strengthening the partnership.

Get on board with C3M and appsec phoenix, schedule a demo and see it for yourself visit https://phoenix.security/request-a-demo/

“AppSec Phoenix is a rising star in cyber security and was founded, and led, by Francesco Cipollone who is regarded as one of the leading figures in the industry. This technology partnership adds significant value to C3M endorsing our credentials as a leader in cloud security,” said Paddy Viswanathan, CEO and Founder, C3M. “C3M’s integration with AppSec Phoenix’s application development security capabilities offers enterprises complete and simplified visibility of risks and management of vulnerabilities across the cloud infrastructure and demonstrates our ambition to create a unified cloud security and operations management experience.”

“We are excited that AppSec Phoenix has partnered with C3M; the two companies are aligned in vision and bring more security at a fingertip to executives,” said Francesco Cipollone, CEO and Founder, AppSec Phoenix. “With a vibrant, intuitive dashboard that easily visualises risks and prioritises them, AppSec Phoenix helps security teams maximise their effectiveness and their company’s security while boosting the company’s ROI by mitigating costly security breaches and attacks.”

“C3M are experts in detecting, finding and resolving cloud vulnerabilities and its advanced, intelligent platform is the best on the market. This agreement shows our quality offerings work well and better together with the aim of solving security problems for customers by visualising, prioritising and remediating vulnerabilities,” continued Cipollone. “We are start-up companies aligned in vision, ethos and cloud. The partnership is a natural fit and in this unique window of opportunity, we are both hungry to grab market share.”

C3M’s Cloud Control is a 100% agent-less cloud-native security and compliance platform that offers enterprises complete cloud control through actionable cloud security intelligence and insights. The AppSec Phoenix Platform integrates with security vulnerability scanners to consolidate and aggregate complex vulnerabilities. Its software provides a simple, all-in-one solution to application security, with easy-to-understand risk and impact metrics.

About C3M

C3M, LLC is a San Francisco headquartered Cloud Security solutions provider. C3M’s Cloud Control is a 100% Agent-less, API based, cloud-native security solution that offers organisations complete cloud control through automated security intelligence, giving them actionable insights into the cloud, its security, and infrastructure, while also auto-remediating any security violations it detects. C3M Access Control helps enterprises gain complete control over identities and infrastructure entitlements, and right size identity privileges.

www.c3m.io

About AppSec Phoenix

AppSec Phoenix was established to provide an effective all-in-one security solution for application developers and businesses. With our easy-use platform, we’ve simplified a notoriously complex problem faced by many companies, small and large, working in the finance field and beyond. www.phoenix.security

Francesco is an internationally renowned public speaker, with multiple interviews in high-profile publications (eg. Forbes), and an author of numerous books and articles, who utilises his platform to evangelize the importance of Cloud security and cutting-edge technologies on a global scale.

Discuss this blog with our community on Slack

Join our AppSec Phoenix community on Slack to discuss this blog and other news with our professional security team

From our Blog

Owasp top 10 has been a pillar over the years; sister to CWE – Common Weakness Enumeration we provide an overview of the top software vulnerabilities and web application security risks with a data-driven approach focused on helping identify what risk to fix first.
Francesco Cipollone
The Cloud Security and AppSec teams at Phoenix Security are pleased to bring you another set of new Phoenix Security features and improvements for vulnerability management across application and cloud security engines. This release builds on top of previous releases with key additions and progress across multiple areas of the platform. Asset and Vulnerability Management – Associate assets with multiple Applications and Environments – Mapping of vulnerabilities to Installed Software – Find Assets/Vulns by Scanner – Detailed findings Location information Risk-based Posture Management – Risk and Risk Magnitude for Assets – Filter assets and vulnerabilities by source scanner Integrations – BurpSuite XML Import – Assessment Import API Other Improvements – Improved multi-selection in filters – New CVSS Score column in Vulnerabilities
Alfonso Eusebio
With cyber threats growing in sophistication, understanding exploitability has become crucial for security teams to prioritize vulnerabilities effectively. This article explores the key factors that influence the likelihood of exploits in the wild, including attack vectors, complexity levels, privileges required, and more. You’ll learn how predictive scoring systems like EPSS are bringing added dimensions to vulnerability analysis, going beyond static scores. We discuss the importance of monitoring verified threat feeds and exploiting trends from reliable sources, instead of getting distracted by unverified claims and noise. Adopting a risk-based approach to prioritization is emphasized, where critical vulnerabilities are addressed not just based on CVSS severity, but also their likelihood of being exploited and potential business impact. Recent major exploits like Log4Shell are highlighted to stress the need for proactive security. Equipped with the insights from this guide, you’ll be able to implement a strategic, data-backed approach to focusing on the most pertinent risks over the barrage of vulnerabilities.
Francesco Cipollone
The Cloud Security and AppSec teams at Phoenix Security are pleased to bring you another set of new Phoenix Security features and improvements for vulnerability management across application and cloud security engines. This release builds on top of previous releases with key additions and progress across multiple areas of the platform. Improved Management your Vulnerabilities and Assets Display “Closed” vulnerabilities list page Display vulnerability stats in Asset screens Override asset exposure for whole Apps/Envs Filter on-screen dynamic statistical and insights Risk-based Posture Management Update risk formula structure Update Vuln risk formula factors Integrations Configure “vulnerability types” fetched from SonarCloud/SonarQube Users can manually trigger a “scanner refresh” Update Jira tickets when the associated vulnerability is closed Other Improvements Handle large number of items in Treemap chart Improved scanner flow: don’t fetch targets until needed Improved performance of MTTR queries
Alfonso Eusebio

Join our Mailing list!

Get all the latest news, exclusive deals, and feature updates.

x Logo: ShieldPRO
This Site Is Protected By
ShieldPRO