One Identity today announced the official debut of its new Starling Identity Analytics and Risk Intelligence (IARI) service, providing organizations with cloud-delivered security and risk analysis capabilities.
The IARI service is the second offering on One Identity’s Starling software-as-a-service (SaaS) platform, joining the Starling Two-Factor Authentication service. The IARI service is not based on any pre-existing One Identity on-premises platform and is a new capability.
“There is a small piece of code that an organization downloads and installed on-premises,” Jason Fehrenbach, senior product manager at One Identity, told eWEEK. “We manage that code through the cloud, and it collects the information that we care about.”
Although the information that is collected is intended to help secure identity, One Identity isn’t actually collecting any private, personally identifiable information. Fehrenbach explained that the IARI platform specifically looks at access and entitlements information. The collected information is filtered through a series of classification rules that highlight items that might involve a degree of risk. The classification rules can include items such as identifying whether a given user can add or delete new information in Microsoft Active Directory.
Fehrenbach noted that Starling IARI is not what the industry currently refers to as user and entity behavior analytics (UEBA) technology. Starling is only looking at the entitlements, he said.
“We’re not looking at users; we’re looking at the underlying access,” Fehrenbach said. “We’re looking at risk at rest, versus risk in motion.”
The Starling IARI service analyzes the entitlements that are in place for a given application or system access before anyone has the chance to use them, he said. The specific aim is to help organizations differentiate and understand all the different entitlements and policies that are in place in order to better identify risk.
Over time, Starling IARI might add a UEBA component as well based on customer demand. Fehrenbach expects that eventually customers will likely want to understand access in terms of entitlement at rest as well as what is actually being used.
As a SaaS offering, One Identity is set to iterate new updates of the Starling IARI on a two-week release cadence. Fehrenbach said that over the last six months while One Identity had the IARI in development, it has managed to maintain a rapid release cycle and he expects that to continue.
“We’re very confident that we’ll be shipping new functionality every two weeks,” he said. “I already have a backlog of multiple features that we’re working through.”
Sean Michael Kerner is a senior editor at eWEEK and InternetNews.com. Follow him on Twitter @TechJournalist.