Date: 04/04/2024
Vendor: Squirrel Compliancy Solutions
Technology/Topic: Network STIG Automation Platform
TEM Video (milTube): https://www.milsuite.mil/video/watch/video/68404
______________________________________________
Welcome to the Technical Exchange Meeting (TEM)!
Squirrel Defender is a purpose-built platform of modernized engines for auditing, analyzing, and remediating network STIG vulnerability findings. Squirrel Defender is the only low-code/no-code GUI in the industry with an embedded workflow driven logic editor to achieve STIG compliance. This automation provides up to 80% reduction of human resources and 99% reduction in audit and remediation time of misconfigurations.
The primary functions of Squirrel Defender are to automate the audit, reporting, and remediation operations of the DISA STIGs for layer 2 & 3 network devices such as switches, routers, firewalls, and wireless controllers. These functions of automated audit and remediation can be performed on-demand, scheduled, or configured for triggered events to both monitor for configuration drift and adhere to continuous monitoring instructions.
Additional features include an integrated DISA STIG Viewer able to view, interact, and export findings with markups in .CKL format, a grading and scoring system based on the National Security Council (NSC), multi-vendor support, and currently the ability to audit over 900+ STIG vulnerabilities across 15 STIG Policies. Squirrel Defender also includes an Integrated Waiver Management System to create and track POA&M and Risk Acceptance Waivers that aid in monitoring waiver states and influence the NSC scoring metrics. Squirrel Defender is a curated platform for automating network STIG compliance.
______________________________________________
To join the DISA TEM mailing list, please contact: disa.tem@mail.mil
______________________________________________
Disclaimer:
— TEMs do not serve as a marketing venue or request for proposal actions.
— TEMs shall not be interpreted as a commitment by the Government to issue a solicitation or ultimately award a contract.
— TEMs do not serve as an endorsement of any presented technologies or capabilities
— Presentations will not be considered as proposals nor will any awards be made as a result of a TEM session.
— TEMs are public open forums – no proprietary or sensitive information should be presented during TEM sessions. Only publicly facing content is permissible in DISA TEM sessions.