Cymulate is a breach and attack simulation (BAS) solution that helps organizations improve their cybersecurity posture by simulating attack test cases to identify weak defenses and control gaps. The Balbix integration with Cymulate ingests the findings from attack simulations performed by Cymulate on IT infrastructure and applies them to the applicable assets and vulnerabilities. The integration supports the Cymulate Endpoint Security module.
Balbix leverages AI to aggregate, normalize, and deduplicate ingested data, along with information integrated from your existing IT and cybersecurity tools. This creates a unified view of your entire asset inventory, including vulnerabilities and their business and operational context. Balbix’s AI models then analyze this data to provide insights such as deployment gap analysis, risk-based vulnerability prioritization (with detailed ranking and scoring), and risk quantification. This process delivers a comprehensive assessment of risk, whether for a single asset, groups of assets, or your entire enterprise, enabling more informed and effective security decisions.
Integration Summary
This table provides a summary of the Balbix integration for the Cymulate connector.
Integration Type | Fetch: An inbound API integration used to fetch simulated attack results and the associated IT infrastructure assets. |
Types of Assets Fetched | Host devices including servers, virtual machines, desktops, laptops. |
Types of Data Fetched | Simulated attack results with their associated assets including asset ID, asset name, tags, OS information, risk, vulnerability (CVE or misconfiguration), status (blocked or not blocked), test case details including description, associated MITRE ATT&CK information such as tactics and techniques. |
Prerequisites
To configure the Balbix connector, you must first create Cymulate API credentials with the appropriate permissions. These credentials are required for completing the configuration process.
To access the Cymulate API, you will need the following credentials:
Base URL: The default API base URL is https://api.app.cymulate.com.
API Client Secret: An API key associated with a user account authorized to fetch assets. Contact Cymulate Support to obtain this key.
Currently Supported EDR: Endpoint Security Module
Create and Configure the Connector
After you have completed the prerequisites, follow these steps to create and configure your Balbix connector for Cymulate.
API Reference Documentation
To learn more about the Cymulate API, see the references listed below: