Subscribers of eEye's Preview Exclusive program receive the best and most information that the eEye Research Team has to offer, including pre-market vulnerability data and custom vulnerability testing tools. |
Quarterly Meetings
Preview Exclusive customers receive quarterly one-on-one meetings with eEye Research analysts to discuss Preview-specific topics. This allows Preview Exclusive customers to keep eEye Research up-to-date on their network-specific issues to better tune the Preview service for their specific environment.
Custom Malware Analysis
As targeted attacks grow in popularity, many customers will experience targeted zero-day exploits against their environment. For these cases, eEye Research will perform four analysis engagements per year on code related to an exploit as provided by the Preview Exclusive customer. The analysis will be kept confidential and will include information on how to mitigate the vulnerability or minimize the attack surface to stop future targeted attacks.
Custom Research Requests
At the request of the Preview Exclusive customer, eEye Research will conduct four targeted research projects into a vulnerability or threat that has a specific mission-critical impact to the Preview customer. The scope of the custom research includes commercial off-the-shelf software testing, new technology deployment examination, or emerging threat impact analysis. These projects will produce a confidential analysis deliverable much the same as what is provided for eEye discovered vulnerabilities.
Designated Analyst Contact
Every Preview Exclusive customer is designated an analyst within the eEye Research team to have direct contact with. While the Preview service is a conglomeration of all eEye Research efforts, having this point of contact allows for the Preview Exclusive customer to ask Preview-related questions directly to the assigned analyst during normal business hours. In the case of an emergency, the Preview Exclusive customer has access to a 24/7 Preview-hotline and e-mail address that will be answered by the first available analyst.
Pre-Public Vulnerability Information For eEye-Discovered Vulnerabilities
eEye-discovered vulnerabilities are reported concurrently to Preview Exclusive customers and the software vendor. The delivered reports and test tools are the same quality as those received by Preview Essential customers following a patch release. However, by receiving these reports and tools prior to public disclosure, Preview Exclusive customers gain an advantage over the vulnerability by leveraging mitigation tactics to thwart exploitable vectors. Since the patch-to-exploit window is consistently shrinking, this helps Preview Exclusive customers avoid the costly patch panic scenario and allows them to roll-out mitigation on their own timeline, not the attackers.
Confidential Critical Infrastructure Reports
Utilizing our law enforcement and intelligence contacts, Utilizing our many law enforcement and intelligence contacts, eEye Research is able to identify many non-public threats to critical infrastructure business and agencies. These threats can range from cyber crime to malicious groups physically targeting certain critical infrastructure businesses. This information is disseminated on a need-to-know basis to Preview Exclusive customers to help them identify these threats and take proper mitigation steps.
Perimeter Vulnerability Scanning
As a Preview Exclusive customer, you may have your public IP address space (up to 3 class-C IP ranges) scanned and reported upon on a weekly basis. The scanning will be performed by eEye Research and will utilize a variety of tools to help you understand the attack surface exposed by your network configuration.
