Blumira has announced the launch of Hearth, a vendor-agnostic AI command center designed to help security teams coordinate their environments from one place.
Hearth integrates with both Blumira and non-Blumira customers and is designed to consolidate the command center rather than the security tools themselves. According to Blumira, the approach allows teams to continue using the tools that fit their businesses while coordinating their security operations through a single platform.
The platform reasons across three sources: Blumira’s already-parsed logs for customers using the platform, the full technology stack a team already operates across identity, firewalls, endpoint detection and response, cloud and raw logs and the organization’s public-facing attack surface.
Hearth also creates schema-validated artifacts that can be reused beyond individual investigations. These include digital forensics and incident response investigations, compliance evidence with the associated query and re-runnable threat hunt playbooks. Blumira said teams can act on the results immediately, rerun them in the future and provide them to auditors.
“Teams have been told to either consolidate their tools or keep the best-in-class solutions they chose. Hearth ends that tradeoff,” said Matt Warner, CEO of Blumira. “Hearth reasons across the environment a team already has, and produces resources that outlive any single case and compound security intelligence over time.”
At launch, Hearth supports several use cases. Its full-scope DFIR investigation capabilities can determine severity, map activity to MITRE ATT&CK, identify affected entities, review evidence queries and provide recommended actions.
For compliance and risk intelligence, Hearth can pull audit evidence from live log data with the query attached, eliminating the need for manual report building. The platform can also orchestrate actions across a team’s existing stack. Hearth surfaces a proposed action, allows a person to approve the automation and then executes it through the team’s integrations.
For managed service providers, Hearth provides fleet-wide visibility, allowing users to ask questions across an entire portfolio. One example provided by Blumira is identifying which customers are vulnerable to a specific CVE without opening multiple dashboards or switching between account views.
The launch follows several expansions from Blumira over the past 12 months. The company expanded its endpoint detection and response and identity threat detection and response coverage, launched Kindling auto-triage to reduce alert workloads by up to 90% by alerting on validated cases rather than every new event and introduced Blumira Managed for 24/7 first-response MDR. Hearth is available now.
