29 Nov 2017

What Makes ConfigOS So Successful?

ConfigOS – Rock Solid, Simple RMF Accreditation and STIG Compliance!
A complete, easy to use software environment for creating, implementing, and remediating security policy, such as the DISA STIG and the CIS benchmarks

FastPath Policy Authoring – Accelerates RMF accreditation by hardening policy controls around an application environment in 60 minutes.
ConfigOS is a flexible Policy Signature authoring system designed to quickly and easily create/tune/extend STIG/policy controls to the requirements of a user and their application environments. Our software creates policies for secure baselines and manages STIG support for the entire STIG and application lifecycle – from pre-production/RMF/ATO through to STIG and application production remediation. The ConfigOS Builder, with FastPath, allows a customer to harden every CAT I/II/III control around an application in typically less than 60 minutes versus the days/weeks/months it takes to do it manually. Additionally, ConfigOS has remediation rollback and special functionality to “bake” STIG POAMs/waivers into its remediation process.

High Performance Scanning and Automated Remediation – The fastest, most complete STIG scanner available, and it is the “easy button” for automated STIG remediation.
ConfigOS STIG 360 manages the complete STIG lifecycle of an application environment. ConfigOS automatically “fixes” STIG policy non-compliances for Windows and Linux systems. ConfigOS can scan 3,000 to 5,000 endpoints per hour and remediate 1,000 to 3,000 endpoints per hour from a single instance of ConfigOS. Add additional instances of ConfigOS, increase capacity. SteelCloud provides tested, documented STIG content so the compliance effort is a snap!

Comprehensive Compliance Reporting – Easy to use XML compliance reporting is a strength of ConfigOS.
ConfigOS provides comprehensive enterprise and individual endpoint XML-based compliance reporting. Additionally, ConfigOS also produces XCCDF output for easy integration with STIG Viewer.

Government Use Cases – Currently operating in all of the above – physical and virtualized – connected and disconnected – private, cloud, and tactical – unclassified and classified – DoD, Federal Civilian, and Vendor.
ConfigOS is agent-less and does not require changes to endpoint application stacks or adding infrastructure – no Internet, no web servers, no database servers, no license servers, no domain controllers, no changes in Active Directory, no STIG waivers. ConfigOS effectively operates in both large and small networks, classified environments, labs, disconnected networks, tactical environments, and FedRamp clouds.

ConfigOS is easy to buy – Available on GSA and other BPAs.

26 Jan 2018

SteelCloud ConfigOS – Windows STIG Remediation Demo – Updated June 2016

SteelCloud ConfigOS – Windows STIG Remediation Demo

Updated June 2016

Welcome to SteelCloud’s updated Windows STIG remediation demonstration using ConfigOS. This video demonstration will show the simplicity of automating STIG policy remediation in a Windows domain and non-domain environment, salong with important new features that have been requested by our clients. ConfigOS is not a simple scanner that tells what you’ve done wrong (such as ACAS, SCAP, Retina et al), but rather a complete remediation solution that changes everything about how you harden systems and stay in compliance. Simply click here to see the remarkable simplicity of STIG remediation, capturing the exact steps and timing to remediate hundreds STIG controls using live software on both physical and VMware virtualized Windows systems – you’ll see STIG management and compliance in a completely difference light!

From this video you’ll get a real sense of SteelCloud’s years of pedigree for productizing STIGs, building on our tremendous experience with the DoD and its mission partners around the world. More importantly, you’ll see how compelling ConfigOS is setting up new environments and maintaining STIG compliance on existing production systems. This demonstration shows complex STIG remediation and the simple process for rolling back these changes. The ConfigOS command line (machine-to-machine) interface that allows ConfigOS to be easily integrated into any security or systems management framework. ConfigOS requires no external communications and is, therefore, a great solution for disconnected networks, labs, and tactical environments.

And, if you are a software or technology company, let us show you how to accelerate your sales into the government by proving that your technology can operate in a STIG-compliant environment.

ConfigOS for Windows requires:
– No network changes
– No security changes
– No communications outside of the client environment
– No additional infrastructure – no web servers, no database servers, and no license servers
– And, it is clientless – nothing to load on target Windows systems

SteelCloud provided tested STIG signatures for:
– Windows XP/7/8/10/2003/2008/2012 – domain & non-domain
– Domain Controller 2008/2012
– Microsoft Office (full suite), IE 10/12, .NET, Chrome, Windows Firewall
– IIS
– Red Hat Linux 5/6/7 (draft), SUSE, CENTOS
– CIS various signatures

Additionally, ConfigOS revolutionizes hardening environments around applications – fully documenting security policy and delivering a secure signature for the user to replicate those policies to other environments. ConfigOS reduces the hardening time/cost by over 90% and the ongoing STIG maintenance cost by 70%. A single instance of ConfigOS can scan up to 5,000 endpoints per hour and can remediate up to 3,000.

01 Dec 2017

SteelCloud Expands Commitment to the CIS Compliance Benchmarks – Becomes a CIS SecureSuite Member

Ashburn, Virginia – August 23, 2017 — SteelCloud LLC announced today that it has become a CIS
SecureSuite member
. Through this membership, the company is further bolstering its
cybersecurity defense coverage by adding comprehensive CIS (Center for Internet Security)
content to its existing automated STIG remediation capabilities. SteelCloud leverages the CIS
Benchmarks, which are a consensus-based, internationally recognized security configuration
resources developed by experts around the world to enhance its patented policy remediation
technology, ConfigOS, to meet the needs of the growing corporate and government markets.

“We are pleased to expand SteelCloud’s commitment to CIS through our new CIS SecureSuite
membership,” said Brian Hajost, SteelCloud President and CEO. “CIS Benchmarks are important
industry-accepted system hardening standards used by organizations in meeting compliance
requirements for FISMA, PCI, HIPAA, and other security mandates. With ConfigOS, we are
delivering the most comprehensive solution for automating the remediation of system policy to
the newest CIS standards.”

“We are excited to welcome SteelCloud as a CIS SecureSuite member, and look forward to
collaborating with them to help enhance their cybersecurity posture,” said Curtis Dukes, Executive
V.P. and G.M., CIS Security Best Practices & Automation.

ConfigOS is currently implemented in enterprise environments, classified and tactical programs,
agile labs, and the AWS commercial cloud. ConfigOS is client-less technology, requiring no
software agents. ConfigOS scans endpoint systems for hundreds of CIS controls in under 60
seconds and then remediates the endpoints in under 90 seconds. Automated remediation rollback
as well as comprehensive compliance reporting are provided. ConfigOS was designed to harden
every CIS control around an application baseline in 60 minutes – typically eliminating weeks or
months from the accreditation timeline. ConfigOS automates the incorporation of documented
policy waivers to ensure flawless automated CIS remediation and compliance reporting.
ConfigOS addresses Microsoft Windows 7/8/10 and Windows Server 2008/2012/2016 along with
Red Hat Enterprise Linux 5/6/7 and CENTOS Linux.

To receive more information on ConfigOS, please contact SteelCloud at info@steelcloud.com.
Video demonstrations of ConfigOS Windows and Linux remediation are available on the
Company’s website,
www.steelcloud.com, under the “Demos” tab. 

29 Nov 2017

Video

Welcome to SteelCloud’s short introduction to automated STIG & CIS remediation using our patented remediation tool – ConfigOS. ConfigOS is not a simple scanner that tells what you’ve done wrong (such as Nessus, SCAP, Retina et al), but rather a complete remediation solution that changes everything about how you harden systems around applications and stay in compliance. ConfigOS can remediate individual Windows or Linux endpoints in less than 90 seconds with a capacity of 1,000 to 3,000 endpoint remediations per hour for each instance of ConfigOS. ConfigOS is currently implemented in classified and unclassified environments, tactical programs, disconnected labs, and the AWS commercial cloud

ConfigOS is client-less technology, requiring no software agents. ConfigOS scans endpoint systems and remediates hundreds of STIG controls in under in under 90 seconds.

Automated remediation rollback as well as comprehensive compliance reporting and STIG Viewer XCCDF output are provided. ConfigOS was designed to harden every CAT 1/2/3 STIG control around an application baseline in 60 minutes – typically eliminating weeks or months from the RMF accreditation timeline. ConfigOS automates the incorporation of documented policy waivers to ensure flawless automated STIG remediation and compliance reporting. In addition to Linux (RHEL, Ubuntu, SUSE, Oracle, CentOS) and Microsoft Windows workstation and server operating systems, ConfigOS also addresses other Windows applications such as SQL, IIS, IE, Chrome, and all of the Microsoft Office components including Office 2016. SteelCloud publishes and supports over 10,000 STIG and CIS controls across these platforms. To receive more information on ConfigOS, please contact SteelCloud at info@steelcloud.com. Additional video demonstrations of ConfigOS are available on You Tube.

09 Sep 2015

How To Choose The Best Theme For My Business?

Building a beautiful website for your business begins with choosing a theme — a design that controls page layout, widget areas, and default style. Selecting Polygon for your business website can feel overwhelming, but you can make it easier by focusing on these three questions.

What Am I Publishing on My Website?
Draft a visual map of your website to help you plan your site structure and decide what you want your homepage to look like. Will your homepage contain static information about your business like a welcome message and business hours or do you want to showcase your latest blog content?

What Features Do I Need?
Are you building a restaurant website, a landing page for your hotel, a corporate blog, or something completely different? Depending on your business, you may need website features exclusive to certain themes.

What Look and Feel Do I Want for My Website?
You can filter themes by style and color if you have a specific look in mind or need to match a brand logo. While most themes can be tweaked with custom headers and background colors, Custom Design unlocks next-level customization.

Think back to the content you expect to publish on your site. Do you need a design that showcases photos? If so, choose a portfolio site or a design that makes the most of high-resolution photos. Perhaps photography plays a small role in your website design. If so, avoid themes that only look good with a lot of photos.

09 Sep 2015

What make a brand successful?

Branding is a way to distinguish your product or service from the rest of market and create a perceived value in the mind of potential customers. For example, in the car world, the Mercedes brand creates different expectations than the Kia brand. However, branding is also important for small businesses that want to stand out in the market, and the keys to successful branding include knowing your target customers and making all your decisions with a focus on what’s important to them.

Define your customers

The first key to successful branding is to define the types of customers you want to attract. Moms with toddlers or women without children? Men who like drag racing or those who prefer quiet afternoons in nature? Health-conscious individuals or those who don’t know a carrot from a turnip? Make a list of all the types of customers you want your business to attract. Volvo built its brand on attracting people concerned with auto safety.

Study Your Customers

Find out what is important to the customers you want to attract. If you already have some customers, you can survey them. Otherwise, look at demographic information and other studies done that provide information about your target customers. Once you know what’s important to your target customers, choose the three or four outcomes that are the most important to your ideal customer.

Be Consistent with Your Brand Position

Using the three or four outcomes you defined, create a brand position that describes what your business does and for whom, the unique value your business offers and how this value is different from the competition, and the benefits the customer gets from your product or service. Also, decide on the one most important thing that your business always promises to deliver to customers. Consistently make all your decisions based on this brand promise and your brand position.

Create the Elements of Your Brand

Create a brand personality — traits you want your business known for — and, if you have an established business, a brand story that shows how your business’ history adds value and credibility to the brand. Also, create the physical elements that make up the brand, including your logo, business tagline, colors, fonts, imagery and other physical elements used in marketing and presenting your brand. These physical brand associations should reflect your brand promise and all your brand traits, and also support your brand position.

Market Your Brand

According to Dan Coughin, president of the Coughlin Co., “The key to branding is reminding the customer of what you want them to remember about your brand,” and he says every contact (including marketing efforts) you have with current or potential customers must reinforce your brand.

09 Sep 2015

Daily Inspiration

On autumn weekends with good weather you can almost experience caravans of people marching over the grandiose lookout balconies between the Dolomites and the Tauern and filling the mountain lodges to capacity. But very few people have the idea of turning the perspective around and approaching the Carnic ridge for once from the valley side. And that is something that is certainly worthwhile.
It is no coincidence that at Heinfels in the valley of Drau, which is called Pustertal here, there stands an ancient castle that still appears to be fortified. It guards the entrance to two valleys: the Villgratental and the Tyrolean Gailtal. The latter is quite hidden, as it begins with a terrain level high above the valley floor of the river Drau. There is a climb of several hundred metres on a serpentine road before reaching the community of Kartitsch, with the prettily shaped tower of the St. Leonhard parish church. From the enclosure wall of the cemetery you can enjoy a distant view to the west into the Pustertal, which here runs in a strikingly straight line. The reason for this is a distinct geological line, the “peri-adriatic seam“. This frontier line leaves the Pustertal in Kartitsch and follows the Tyrolean Gailtal, which to the east of the Kartitscher Sattel is called the Tilliacher Tal, and then further east beyond the federal border with Carinthia again changes its name, and for the next 20 kilometres goes under the name of Lesachtal. At Kötschach-Mauthen the name of the valley changes again, confusingly back to Gailtal, which at Villach at last flows into the Drau.
Viewed from above, the Gail or Lesachtal also runs in a straight line. There is a clear distinction in appearance between the northern and southern sides of the valley. N ons side the gentle foothills of the Lienzer Dolomites, with its wide alp areas, on the other side the rocky contours of the Carnic ridge towering above thick mountain forest and marking the state border with Italy.
In Kartitsch we are already 1.350 m above sea level, the area is one of the highest situated valleys in East Tyrol, which itself is at high altitude.
Some 200 m higher the Kartitscher Sattel is reached, from where you can look down onto Obertilliach and Untertilliach.
“Golzentipp“ is the name of the local mountain in this area. A perfect vantage point with a grandiose panorama view, encompassing the Hohen Tauern and the Schober group of mountains, the Lienzer Dolomites, the Carnic Alps, the Sextener Dolomites and far into the Pustertal. The chances are good that the view can also be enjoyed, as testified by the many years of meteorological records taken in this region, showing an above-average number of sunny days.
Fans of high rocky cliffs will prefer the south side of the valley and head for one of the many side valleys of the Carnic ridge. Pfannspitze, Großer Kinigat, Porze, Cima Manzon, Gamskofel, Hochspitz, Steinkarspitz – between the Obstanser See and the Luggauer Scharte there are countless opportunities to test your stamina and alpine abilities in the midst of grandiose mountain scenery.
[From mountainvillages.at]

07 Sep 2015

Hello world!

Welcome to WordPress. This is your first post. Edit or delete it, then start writing!

21 Aug 2015

Follow your passion, be prepared to work hard and sacrifice, and, above all, don’t let anyone limit your dreams.

Quote

Far far away, behind the word mountains, far from the countries Vokalia and Consonantia, there live the blind texts. Separated they live in Bookmarksgrove right at the coast of the Semantics, a large language ocean. A small river named Duden flows by their place and supplies it with the necessary regelialia. It is a paradisematic country, in which roasted parts of sentences fly into your mouth.

The Big Oxmox advised her not to do so, because there were thousands of bad Commas, wild Question Marks and devious Semikoli, but the Little Blind Text didn’t listen. She packed her seven versalia, put her initial into the belt and made herself on the way.

A small river named Duden flows by their place and supplies it with the necessary regelialia. It is a paradise matic country, in which roasted parts of sentences fly into your mouth. Even the all-powerful Pointing has no control about the blind texts it is an almost unorthographic life One day however a small line of blind text by the name of Lorem Ipsum decided to leave for the far World of Grammar. The Big Oxmox advised her not to do so, because there were thousands of bad Commas, wild Question Marks and devious Semikoli, but the Little Blind Text didn’t listen. She packed her seven versalia, put her initial into the belt and made herself on the way. When she reached the first hills of the Italic Mountains, she had a last view back on the skyline of her hometown Bookmarksgrove, the headline of Alphabet Village and the subline of her own road.

21 Aug 2015

Gallery

Far far away, behind the word mountains, far from the countries Vokalia and Consonantia, there live the blind texts. Separated they live in Bookmarksgrove right at the coast of the Semantics, a large language ocean. A small river named Duden flows by their place and supplies it with the necessary regelialia. It is a paradisematic country, in which roasted parts of sentences fly into your mouth.

The Big Oxmox advised her not to do so, because there were thousands of bad Commas, wild Question Marks and devious Semikoli, but the Little Blind Text didn’t listen. She packed her seven versalia, put her initial into the belt and made herself on the way.

A small river named Duden flows by their place and supplies it with the necessary regelialia. It is a paradise matic country, in which roasted parts of sentences fly into your mouth. Even the all-powerful Pointing has no control about the blind texts it is an almost unorthographic life One day however a small line of blind text by the name of Lorem Ipsum decided to leave for the far World of Grammar. The Big Oxmox advised her not to do so, because there were thousands of bad Commas, wild Question Marks and devious Semikoli, but the Little Blind Text didn’t listen. She packed her seven versalia, put her initial into the belt and made herself on the way. When she reached the first hills of the Italic Mountains, she had a last view back on the skyline of her hometown Bookmarksgrove, the headline of Alphabet Village and the subline of her own road.