Comodo cWatch
cWatch is a family of products and services that aim to solve threat and breach detection problem of organizations with any size. Having Security as a Service model cWatch can offer managed security services through Comodo Security Operation Center. Comodo cWatch can address and remediate all 3 major security issues:
- Threat Management: Continious monitoring and reporting network, system, user activity and data access in combination with extensive analysis and correlation capabilities.
- Compliance: Log management and compliance reporting
- Incident Managemenet, Handling and Response: Enables assignment of incidents, creates cases for group of incidents, remediation notes and event details in a single view.
Our Security Operations Center (SOC) provides:
- Complete threat investigations and analysis
- Threat assessment reports to identify risks
- Reverse malware and suspect application engineering
- PCI compliance and vulnerability scans
- Continuous Monitoring for insight and Action
- Round the clock incident handling and response
- Human expertise required for managing and monitoring of security related hardware or software
- Log anaysis for threat identification
- Research of threats and continuous content creation
- Recommendation for best course of action to be taken

Powerful C-Watch analytics engine that is able to analyze vast numbers of events

Big data analysis to uncover security incidents

Statistical methods for anomaly and outlier detection

Automatic escalation of valid security incidents

Massively scalable
There are 2 kinds of product offered in cWatch. These are cWatch Network and cWatch Web Security.
cWatch Network
cWATCH Network is an advanced threat and breach detection service that protects networks, assets and sensitive data from malicious activity. cWatch LAN combines and provides: File visibility, Network visibility, Endpoint visibility, User actions visibility.
The aim of cWatch Network is to detect and take action on:
- Unusual Inbound/Outbound Network Traffic
- User Account Activity Anomalies
- Geographical Anomalies
- Authentication Anomalies
- Anomalies Specific to Backend Applications
- Web Traffic Anomalies
- Malware File Checking
- Port-Application Traffic Anomalies
- Suspicious Registry Or System File Changes
- DNS Request Anomalies
- Mobile User Profile Anomalies
- Signs Of DDoS Activity
- Long-Term Trending
- Detection of Autonomous System Behavior
cWatch Web Security
cWATCH Web Security Service is a comprehensive solution for web application security that follows the security-as-aservice delivery model, and includes follow the sun monitoring and management provided by Comodo Security Operations Center.
cWatch Web Security offers a holistic approach to web application security by providing full server environment monitoring of not only the Web Server itself but also the following critical server components: