NEXT-GENERATION CYBERSECURITY SOLUTION
BreachZero 4 Relativity is a sophisticated, purpose-built cybersecurity solution designed to seamlessly integrate into any Relativity environment with no changes to the network or Relativity Servers.

BreachZero acts as a vault protecting your sensitive Relativity data from cyber-criminals. BreachZero is deployed in three parts: a security appliance, nurog8; an audit log collector, interog8; and a cloud analytics platform, realiz.

See how BreachZero works

LAW FIRMS HAVE BECOME TARGETS FOR CYBERCRIMINALS

Law firm breaches have become front-page news. eDiscovery platforms are especially vulnerable, due to the wealth of highly concentrated and potentially damaging information that is exchanged during eDiscovery. The fact that the information is part of litigation should speak to how valuable it is.

Law firms and eDiscovery vendors are expected to provide a variety of services, while having the obligation to protect the data. Each service makes a larger attack footprint.

Being secure, while providing these services is a massive undertaking.

Common eDiscovery weaknesses

Limited user logon
auditing

Lack of segmentation from
corporate network

Absence of automated
detection and response

Lack of threat
intelligence

Poor network traffic
visibility

Insufficient protection from
attacker already on network

nurog8™ | VIRTUAL APPLIANCE

The nurog8 is a proprietary SDN security appliance, purpose-built by BraintraceLABS to offer unparalleled security, stability and performance. The nurog8 segments, monitors and protects the Relativity environment.

realiz™ | ANALYTICS PLATFORM

The BreachZero realiz cloud analytics platform monitors and controls every nurog8 in the BreachZero ecosystem. Customers can access dashboards and view reports on their security postures. Each Relativity environment is subject to different threats. The distributed architecture of BreachZero makes it a powerful threat intelligence platform. Every BreachZero customer benefits from the threat intelligence Braintrace gathers. This includes global blacklists, evolving signatures, rulesets, whitelists, and much more.

SECURITYMODULES

lacer8™ | TRANSPARENT SEGMENTATION

The BreachZero lacer8 module is a multi-threaded, open-flow based SDN application designed to enforce at Layer 2. This allows the network architecture to be abstracted to the nurog8 interfaces, meaning no changes to the Relativity server’s IP configurations. The SQL servers can be on the same subnet as the DataGrid and any other servers in the Relativity environment. BreachZero lacer8 isolates the servers into segments and locks down the traffic to just the essential ports outlined by Relativity best practices.

surmiz™ | BREACH DETECTION

The BreachZero surmiz module is a multi-threaded, breach-detection engine monitoring all traffic through the lacer8 module. The communication with the Layer 2 networking module is bi-directional, meaning when malicious traffic patterns are detected, surmiz is able to manipulate the flows in the lacer8 module blocking or redirecting the traffic. The attack information is then uploaded to the BreachAero realiz cloud for analysis and reporting.

halucn8™ | DECEPTION SERVICES

The BreachZero halucn8 module is a low interaction deception service designed to emulate the Relativity web portal. halucn8 tracks suspicious interactions and uploads the information to the BreachZero realiz platform. The halucn8 service can be used as a target for redirected malicious traffic from the breach detection layer.

interog8TM | RELATIVITY LOG ANALYTICS

The BreachZero interog8 module ingests log data from the Relativity database and web servers. This provides authentication, audit, and location information around user and workspace activity. This information is uploaded to the BreachZero realiz cloud for further analysis, leveraging machine-learning anomaly detection.

BREACHZERO IS AN ELEGANT CYBERSECURITY
SOLUTION FOR YOUR RELATIVITY ENVIRONMENT