Stage 2

EVALUATE

Measuring Defense Effectiveness Against Real Threats

Modern enterprises face increasingly sophisticated threats while struggling to：

Assess security effectiveness against current attack techniques
Validate defense capabilities across the kill chain
Measure security control effectiveness quantitatively
Keep pace with evolving threat landscapes
Identify protection gaps across security layers

Our Approach

DigiDations summarizes essential protective functions for security devices. By weekly executing various recent attack actions, it validates detection modules across different security areas and uses a quantitative scoring system for capability assessment. This helps users understand the defense capabilities of security products against various attacks and take appropriate mitigation measures.

Validate how effective are your security products

Network security infrastructure (NGFW, IPS, WAF)

Endpoint security solutions

Email security gateways

Container security systems

Data loss prevention (DLP) tools

Deception technologies (Honeypots)

Application security controls

OT/ICS security systems

Solution Details

01. Configuring scheduled tasks to validate capabilities across security products

02. Validators executing large volumes of latest-generation validation actions according to scheduled tasks

03. Atlas generating and delivering capability validation reports based on results

Key Benefits

Comprehensive view of security effectiveness across all controls
Quantifiable metrics for security investment decisions
Gap analysis for targeted improvements
Real-time visibility into security posture
Evidence-based security optimization

Real-world Application

A financial institution’s security team questioned their defense effectiveness after experiencing phishing and zero-day breach incidents.

Our validation revealed:

WAF detection rate of only 65% against emerging attacks
Email security gateway missing 50% of targeted phishing attempts
EDR coverage gaps in critical business segments

Post-implementation results:

Increased WAF detection rates to 95% through enhanced rules and configurations
Improved phishing detection to over 90%
Achieved comprehensive EDR coverage across all business units

The evaluation process transformed our security posture from assumption-based to evidence-based. We now have clear metrics to measure and improve our security effectiveness.

CISO, Global Financial Institution