Proofpoint, Inc., (NASDAQ:PFPT), a leading cybersecurity and compliance company, has announced a technology partnership with Okta, the leading independent provider of identity for the enterprise, to provide a better way for joint customers to combat email credential phishing attacks by automating incident response with best-of-breed, cloud-based solutions. By integrating Proofpoint’s Threat Response Auto-Pull (TRAP) and the Okta Identity Cloud, security teams can automatically layer additional authentication security to ensure users who clicked on a phishing URL do not have their accounts compromised.
Every day, security teams are faced with both high volume and highly-targeted credential phishing attacks and unfortunately disjointed security systems add complexity to the challenge. The†Proofpoint-Okta partnership†makes security orchestration easier and provides a superior user experience for incident responders, security analysts, and system administrators. It reduces the time necessary to clean up credential phishing attacks with an accurate, timely response.
“Credential phishing is an Achilles heel for many organizations because most phishing links are hosted on compromised, legitimate websites with good reputations. Clever attackers even wait until after an email has passed through the gateway and into a user’s inbox before changing the content of the site to a page designed to steal usernames and passwords,” said Ryan Kalember, senior vice president of Cybersecurity Strategy for Proofpoint. “We can detect these phishing sites when a user clicks on them, but containing the risk requires valuable time and security resources. Our Okta partnership helps organizations automatically ensure that users who clicked on these malicious links don’t have their accounts accessed by attackers.”
Once Proofpoint detects that a user has clicked on a malicious URL and has been permitted access to the phishing webpage, administrators can automatically deploy stepped-up authentication via Okta Multi-Factor Authentication (MFA). This additional security layer ensures the user is reauthenticated, using multiple factors, before accessing corporate systems, which will help confirm the user’s identity and prevent compromise.
Proofpoint’s†Threat Response Auto-Pull†(TRAP) enables messaging and security administrators to move malicious or unwanted messages to quarantine, after delivery. It also tracks forwarded mail and distribution lists and creates an auditable activity trail. Joint Proofpoint-Okta customers can now integrate Proofpoint TRAP with the†Okta Identity Cloud, which implements numerous factors for authentication across knowledge, possession, biometric, and contextual elements, to strengthen security and verify user identities.
“Working together, Okta and Proofpoint can help security teams to get the greatest value from their existing technology investments, by assisting with credential phishing attack detection and rapid response,” said Chuck Fontana, vice president of Integrations and Strategic Partnerships, Okta. “Email continues to be the number one threat vector and credential phishing attacks are flooding organizations worldwide. We are committed to helping global teams manage and secure their extended enterprise, and combining Okta and Proofpoint’s best-in-class solutions provides an additional layer of security to detect and mitigate potential malicious activities.”
