Phantom, headquartered in Palo Alto, CA, announced on April 26 a strategic investment and technology development agreement with In-Q-Tel (IQT), the independent, non-profit strategic investor that identifies, adapts and delivers innovative technology solutions to support the mission of the U.S. Intelligence Community.
The partnership fuels Phantom’s mission to provide a layer of “connective tissue” that enables organizations to integrate their existing, disparate security technologies.
Julian Mann, principal, Investments at IQT said, “Phantom is pioneering an automation and orchestration platform that will dramatically reduce the response and remediation gap caused by limited resources, an increasing threat surface and incident rate, and the overwhelming complexity of an organization’s security enterprise.”
Recently recognized as the Most Innovative Company at the 2016 RSA Conference, Phantom streamlines security operations through the execution of digital “Playbooks” to achieve in seconds what may normally take minutes or hours to accomplish with the dozens of point products used in typical security environments. Focused on enhancing security operations, Phantom doesn’t replace existing security products, but instead makes an organization’s investment smarter, faster and stronger.
While not strictly open source, Phantom is expandable by the user community. Phantom Apps allow users to create connectors to in-house or more obscure security technologies and abstract their APIs back to the platform. Phantom Apps are Python modules, allowing anyone in the community to expand the platform and contribute Apps to the Phantom App store. Similarly, Phantom Playbooks are also written in Python and can be customized at will by the community. Playbooks are synchronized via Git and published on a public GitHub repository.