Verodin

The firm's core offering is the Security Instrumentation Platform (SIP), which functions as a Breach and Attack Simulation (BAS) solution. This platform enables clients to continuously and safely test their live production environments against a wide array of threats and attack scenarios without jeopardizing business operations. SIP validates the efficacy of an organization's entire security stack, including network, endpoint, email, and cloud controls, by identifying misconfigurations, coverage gaps, and areas for optimization. The platform is deployable on-premises, as a virtual appliance, or via SaaS and integrates with over 50 other security products. Its architecture consists of a central 'Director' that manages 'Actors' placed across the client's IT environment to execute tests and report back on how security tools respond.

Verodin serves a global enterprise client base across all major verticals, including finance, healthcare, and government agencies. Its business model centers on selling the SIP platform, which was available through standalone resellers and channel partners. In May 2019, FireEye acquired Verodin for approximately $250 million in cash and stock. This strategic acquisition integrated Verodin's validation capabilities with FireEye's Mandiant threat intelligence and Helix security orchestration platform. The objective was to automate security effectiveness testing, using real-world threat intelligence to provide a quantifiable and continuous approach to security validation. Following the acquisition, Verodin's platform became known as Mandiant Security Validation and continued its mission to provide organizations with the unvarnished truth about their security effectiveness.