Fortinet FortiRecon
 

Overview:

Digital Risk Protection Service

FortiRecon is a Digital Risk Protection (DRP) service that operates alongside existing security solutions to provide security teams with the visibility an adversary can have of their infrastructure. This early warning of any malicious activity targeted at their organization enables fast detection and mitigation. Operating solely from outside the organizational perimeter, the service maps an organization’s digital footprint and monitors it for abnormal activity. The service gives organizations the intelligence to mitigate credible security threats in a controlled manner as part of ongoing security efforts.

• FortiRecon External Attack Surface Management. Provides an adversary’s view of the organization’s digital attack surface and prioritizes risks and exposures, enabling security teams to mitigate threats in a controlled manner before they become a problem.
• FortiRecon Brand Protection. Continually monitors the organization’s digital footprint for unauthorized changes, typosquatting, rogue applications, credential leaks, brand impersonation on social media, and web-based phishing attacks, which may impact brand value, integrity, and trust.
• FortiRecon Adversary Centric Intelligence. Leverages FortiGuard Threat Research Team to provide comprehensive coverage of Dark Web, open source, and technical threat intelligence, including threat actor insights to enable organizations to proactively assess risks, respond faster to incidents, better understand their attackers, and protect assets.

Challenge

• Threat actors are constantly scanning the internet looking for gaps in defenses which can be exploited to gain a foothold in the organization’s network
• The fast pace of change for cybersecurity means security teams struggle to keep up with the latest threats

Service

• FortiRecon scans the organization’s attack surface and identifies risks to assets. FortiGuard Threat Intelligence delivers early warning of risks to the organization through targeted, curated intelligence

Benefits

FortiRecon provides visibility and intelligence allowing the customer to take controlled riskbased security actions:

• Understand the diverse threats to the organization and protect brand reputation
• Respond faster to incidents, better understand attackers, and safeguard assets
• Expand view and early warning of adversarial activity from Dark Web and other sources

FortiRecon Solution Bundles:

SOLUTION BUNDLES	FEATURE	FORTIRECON EASM	FORTIRECON EASM AND BP	FORTIRECON EASM, BP AND ACI
EASM
	Asset Discovery
	Security Issues
	Asset Reports
	Monthly Scanning
	Weekly Scanning	-	-
	On-demand Scans (Two per Year)	-	-
BP
	Third-party Credential Leaks
	Source Code Sensitive Leaks	-
	Open Cloud Storage Buckets	-
	Domain Typosquatting	-
	Rogue Mobile Apps	-
	Phishing Monitoring - Digital Watermarkings	-
	Takedowns	-
	Social Media Brand Impersonations	-
ACI
	Social Media	-	-
	Dark Web Monitoring	-	-
	Technical Intelligence	-	-
	IoC Reputation Lookup (IP/Domain/Hash/CVE)	-	-
	Dark Web Marketplace Monitoring (Stealer Logs)	-	-
	OSINT Cyber Threats	-	-
Delivery
	Executive Reporting
	24x7 Portal Access
	Analyst Support	-
	Realtime Alerting	-
	Orchestration/Integrations (Ticketing/SOAR)	-

¹ Each Virtual Domain (VDOM) operating on a physical or virtual device counts as one (1) licensed network device
* FGT 7000 Series is supported on all FMG models and does not require Chassis Management.

³ Devices/VDOMs maximum with device add-on license, if supported

Documentation:

Download the Fortinet FortiRecon Datasheet (PDF).