Automate Evidence Collection and Testing

CrowdStrike has redefined security with the world’s most advanced cloud-native platform that protects and enables the people, processes and technologies that drive modern enterprise. CrowdStrike secures the most critical areas of enterprise risk – endpoints and cloud workloads, identity, and data – to keep customers ahead of today’s adversaries and stop breaches. Powered by the CrowdStrike Security Cloud, the CrowdStrike Falcon® platform leverages real-time indicators of attack, threat intelligence on evolving adversary tradecraft and enriched telemetry from across the enterprise to deliver hyper-accurate detections, automated protection and remediation, elite threat hunting and prioritized observability of vulnerabilities – all through a single, lightweight agent. With CrowdStrike, customers benefit from superior protection, better performance, reduced complexity and immediate time-to-value.

With the CrowdStrike Hypersync, you’ll be able to pull CrowdStrike reports into Hyperproof that help validate a few types of security controls that are often audited, including (1) the List of Hosts report, which provides a list of devices being monitored with information about their current security status, and (2) the Endpoint Detections report, which highlights vulnerabilities detected, severity and time to resolution. After automatically collecting this proof, you can set up automated tests in Hyperproof to validate whether devices have been secured and whether critical vulnerabilities have been addressed promptly.

Snowflake provides a solution for storing and accessing your structured, semi-structured, and unstructured data in one location. Users can integrate and analyze data sets that were previously impossible to obtain and gain seamless access to external data at scale and with speed. All while, Snowflake handles maintenance, administration, and a host of other automated services, so organizations don’t have to. Many organizations use Snowflake to store data used by their security and compliance teams. With the Hypersync Snowflake, you pull in data from any Views defined within Snowflake into Hyperproof as proof of control activities and for automated control testing.

KnowBe4 is the world’s first and largest New-school security awareness training and simulated phishing platform that helps you manage the ongoing problem of social engineering. With the KnowBe4 Hypersync, you can automatically gather proof of your security training activities in Hyperproof and easily demonstrate compliance against infosec frameworks and standards. Specifically, users can collect proof to validate that training campaigns and training activities have been completed promptly. Hyperproof can automatically scan Training campaign reports and flag the list of users who haven’t met your training SLA and alert relevant personnel to follow up with employees to complete the training.

Sapling, a Kallidus company, empowers HR leaders to connect their people, tools and data on a uniquely customizable HCM platform — automating onboarding to offboarding and everything in between. The Sapling Hypersync enables you to automatically sync personnel data including lists of employees and employees with changes in employment status from Sapling into Hyperproof to speed up user access reviews.

Personio has built a modern all-in-one HR solution for SMEs. The Personio Hypersync will enable you to automatically sync compliance data such as lists of employees and employees with changes in employment status from Personio into Hyperproof to speed up user access reviews.

Sage HR is an HR software company that streamlines human resource management for customers in over 1,200 cities worldwide. The Sage HR Hypersync enables you to automatically sync personnel data including lists of employees and employees with changes in employment status from Sage into Hyperproof to speed up user access reviews.

Zenefits is a comprehensive but simple HR management software for small businesses with a particular focus on making benefits administration easy. The Zenefits Hypersync will enable you to automatically sync compliance data such as lists of employees and employees with changes in employment status from Zenefits into Hyperproof to speed up user access reviews.

UltiPro helps multinational organizations simply HR processes, manage people data, meet local compliance, and support their entire global workforce with one platform. The UltiPro Hypersync will automatically sync compliance data such as lists of employees and employees with changes in employment status from TriNet into Hyperproof for user access reviews.

TriNet is a PEO used by a wide range of customers to outsource HR solutions. The TriNet Hypersync will automatically sync compliance data such as lists of employees and employees with changes in employment status from TriNet into Hyperproof for user access reviews.

Square Payroll offers a host of payroll and tax features to create a smooth payroll experience. With the Square Payroll Hypersync, you can automatically sync compliance data such as employee lists and changes in employment status from Square Payroll into Hyperproof to speed up user access reviews.

Run (Powered by ADP) is an intuitive platform geared towards small businesses, streamlining recurring processes and providing access to HR support. The Run Hypersync will let you automatically sync compliance data such as lists of employees and employees with changes in employment status from Run into Hyperproof to ease the process of user access reviews.

Rippling serves as both an HR and IT platform that allows you to seamlessly manage not only payroll and benefits but also employees’ apps and devices. With the Rippling Hypersync, you can automate the syncing of compliance data from Rippling into Hyperproof to ease user access reviews.

QuickBooks Payroll is the #1 online payroll service for small businesses. With auto payroll, taxes, and forms it can save you both time and effort. The Quickbooks Payroll Hypersync will allow you to automatically sync compliance data such as employee lists and employees with changes in employment status from QuickBooks Payroll into Hyperproof to expedite user access reviews.

Paylocity is an online platform and app that manages more than just payroll– from shift scheduling to employee onboarding, Paylocity has it all for any size and type of business. The Paylocity Hypersync will allow for the automatic syncing of compliance data such as employee lists and changes in employment from Paylocity into Hyperproof to accelerate user access reviews.

Paycom is a single database containing talent acquisition, time & labor management, payroll, and HR information. Employees can enter their own details at one time in one place for it to be populated systemwide. With the Paycom Hypersync, you can automatically sync data such as lists of employees and employees with changes in employment from Paycom into Hyperproof to remain compliant and expedite user access reviews.

Paychex Flex is an all-inclusive platform to manage payroll, attendance, benefits, and more. Providing employee onboarding assistance and HR consulting services, Paychex Flex allows for quicker and more accurate processing. The Paychex Flex Hypersync will automatically sync compliance data such as lists of employees and employees with changes in employment status from Paychex Flex into Hyperproof to speed up user access reviews.

Namely is an HR platform with the look and feel of a social media site primarily serving mid-sized businesses. Employees can request PTO, appreciate peers, and review paystubs from one place. With the Namely Hypersync, you can automatically sync compliance data such as lists of employees and employees with changes in employment status from Namely into Hyperproof to ease user access reviews.

Justworks is a one stop shop that allows you to manage payroll, benefits, HR, and compliance. With experts available through call, text, or Slack, Justworks provides both software and support. The Justworks Hypersync will allow you to automatically sync compliance data such as employee lists and employees with changes in employment status from Justworks into Hyperproof to expedite user access reviews.

Since 1986, Insperity has been showing companies how to harness the power of HR to improve business success. It offers a blend of service and HR technology to serve companies with 10 employees and those with more than 5000 employees. With the Insperity Hypersync, you can automatically sync compliance data such as lists of employees and employees with changes in employment status from Insperity into Hyperproof –to expedite user access reviews.

Bob is a modern HRIS platform that streamlines core HR processes and maximizes the employee experience. With the Bob Hypersync, you can automatically sync compliance data such as lists of employees and employees with changes in employment status from Bob into Hyperproof –to make user access reviews a more automated process.

Workforce Now is an all-in-one suite for HR, payroll, time, benefits, and talent from ADP. With the Workforce Now Hypersync, you can automatically sync compliance data such as lists of employees and employees with changes in employment status from Workforce Now into Hyperproof –to make user access reviews a more automated process.

Google Workspace, formerly known as G-Suite, is a collection of cloud computing, productivity and collaboration tools, software and products developed and marketed by Google. The Google Workspace Hypersync was built to help you speed up user access reviews; it automatically pulls information about how employees are accessing and utilizing Google Workspace products into Hyperproof in an easy-to-consume format. The Google Workspace Hypersync can pull in information such as list of groups, list of users, login audit log and user security reports.

Kubernetes, also known as K8s, is an open-source system for automating deployment, scaling, and management of containerized applications. Due to the performance nature of modern cloud-native applications, Kubernetes environments need to be highly distributed. Proper multi-cluster management and governance ensure consistent, secure operations across all environment. Kubernetes governance refers to a set of rules created through policies that need to be enforced on all Kube clusters. This is a critical component for enterprises being production-ready and working at scale in Kubernetes.

Hyperproof supports a Kuberenetes in Google Cloud Platform (GDP) Hypersync. With this Hypersync, you can automatically access information from Kubernetes Engine within Hyperproof such as list of clusters, list of pod security policies and list of workloads. This information can help you validate that your organization is maintaining a successful Kubernetes governance strategy.

Jumpcloud’s SSO & Active Directory products helps organizations reduce costs with unified device and identity access management. The Jumpcloud Hypersync allows you to automatically pull in data from Jumpcloud to speed up control assessments. At this time, the Hypersync supports the following proof types: list of devices; list of users; password policy; policy results; user group memberships. Automatically getting this information into Hyperproof makes it easier for compliance professionals to confirm that the right policies are in place across their organization’s assets.

Many security and IT teams use ServiceNow applications to track incidents, requests and their resolutions. Compliance professionals are interested in accessing the information from ServiceNow applications because the data helps them answer important questions about their incident response controls. For instance, did the team respond to the latest security incident on time according to the SLA set in the company’s incident response policy? Or, what specific things were done to resolve the issues that caused the latest incident? Hyperproof’s ServiceNow Hypersync can automatically pull in data from ServiceNow such as list of incidents — making it easier for compliance professionals to validate their incident response controls. 

Splunk offers an open, extensible data platform that supports shared data across any environment so that all teams in an organization can get end-to-end visibility, with context, for every interaction and business process. Splunk Cloud Platform and Splunk Enterprise are used in Development teams to help improve the quality of their applications and reduce issue resolution time. With the Splunk platform, Dev and IT teams can quickly search their log files for debugging and to understand customer activity and behavior, product and service usage, and transactions. The Splunk Hypersync can automatically pull in information from Splunk such as list of alerts and list of fired alerts into Hyperproof — making it easier to review whether any alerts are disabled or ought to receive further attention from a security professional.

BambooHR is an all-in-one HR software made for small and medium businesses and the people who work in them. The software makes it easy to collect, maintain and analyze your people data, improve the way you hire talent, onboard new employees, manage compensation, and develop your company culture. With the BambooHR Hypersync, you can automatically sync compliance data such as list of employees and employees with change in employee status from BambooHR into Hyperproof — to make user access reviews a more automated process.

Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM). You control how your organization’s devices are used, including mobile phones, tablets, and laptops. You can also configure specific policies to control applications. Intune also allows people in your organization to use their personal devices for school or work. On personal devices, Intune helps make sure your organization’s data stays protected and can isolate organization data from personal data. InTune integrates with Azure AD to control who has access and what they can access. With the Intune Hypersync, you can automatically pull in information from Intune such as list of devices, list of compliance policies, list of devices without compliance policy — to test whether your organization’s devices are configured in ways which are compliant with your policies.

Hire, pay, manage, and support your people with Gusto’s all-in-one HR platform. Gusto capabilities include full-service payroll, employee benefits, time and attendance, onboarding and hiring, talent management and reporting. With the Gusto Hypersync, you can automatically sync data such as list of employees and employees with change in employee status into Hyperproof to make user access reviews a more automated process.

The Azure cloud platform is more than 200 products and cloud services designed to help you bring new solutions to life—to solve today’s challenges and create the future. Build, run, and manage applications across multiple clouds, on-premises, and at the edge, with the tools and frameworks of your choice. Hyperproof has integrations with the following Azure services: Azure Database for Postgres SQL Server, Storage Account, and Virtual Machine. Gather evidence of control activities in domains including: information system security, identity and authentication, and configuration and change management. You can also write automated tests on certain evidence brought in from your Azure services. For instance, the Azure Hypersync can automatically pull a report containing a history of backup jobs and their statuses. You can then write an automated test in Hyperproof to check whether there’s been any data backup failures and be alerted if there has been a failure.

Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform, offering over 200 fully featured services from data centers globally. Millions of customers—including the fastest-growing startups, largest enterprises, and leading government agencies—are using AWS to lower costs, become more agile, and innovate faster.

Specific AWS services Hyperproof has integrated with include: EC2, IAM, RDS, S3, AWS Security Hub and VPC. With these services, you can collect evidence on controls in domains including information system security, identity and authentication, and configuration and change management. You can also write automated tests on the evidence brought in from AWS. For instance, the AWS Hypersync can automatically pull a report containing a history of backup jobs and their statuses. You can then write a test in Hyperproof to check whether there’s been any data backup failures and be alerted if there has been a failure.

GitHub is a web-based version-control and collaboration platform for software developers. With Hyperproof, you can automatically gather compliance evidence from GitHub, including branch protection settings, commits, commit details, pull requests, repository settings, security alerts/automated scanning and user lists. To ensure the security of code, it is important to validate that a designed approval process was followed before new code is deployed into the production environment. Hyperproof’s GitHub Hypersync allows you to automatically access reports of your GitHub branch protection settings that enforce reviews. You can write automated tests to check whether GitHub branches have appropriate protection.

Tenable.io is a cloud-based vulnerability management platform that provides complete visibility into the assets and vulnerabilities in your organization. With this Hypersync, you can automatically generate reports with the vulnerabilities results of a scan defined in Tenable, making it easier to check whether your critical vulnerabilities have been addressed in a timely manner. You can also set up alerts to be notified of any critical issues.

Cloudflare is a web infrastructure and website security company that provides content delivery network and DDoS mitigation services. The Cloudflare Hypersync lets you automatically pull in firewall settings information from your Cloudflare account into Hyperproof. You can set up an automated test within Hyperproof to confirm that the right settings are in place for your firewall and be alerted if the settings have changed and become out of compliance.

Qualys helps your business automate the full spectrum of auditing, compliance and the protection of your IT systems and web applications. With the Qualys Hypersync, you can automatically generate reports with the vulnerabilities results of a scan defined in Qualys, making it easier to check whether your critical vulnerabilities have been addressed in a timely manner. You can also set up alerts to be notified of any critical issues.

Salesforce is an American cloud-based software company headquartered in San Francisco, California. It provides customer relationship management service and also provides a complementary suite of enterprise applications focused on customer service, marketing automation, analytics, and application development. The Salesforce Hypersync can automatically pull in pertinent data from Salesforce needed for conducting user access reviews, such as List of Permission Sets, List of Profiles, List of Users, and Profile Details.

GitLab is a web-based DevOps lifecycle tool that provides a Git repository manager providing wiki, issue-tracking and continuous integration and deployment pipeline features, using an open-source license, developed by GitLab Inc. The GitLab Hypersync allows you to automatically pull in certain information from your GitLab account into Hyperproof, making it faster to validate your configuration and change management controls. For instance, with the GitLab Hypersync, you can pull in list of members with their email addresses, or branch protection settings for repos. Hyperproof allows you to set up a test to automatically check whether the right settings are in place for branch protection. You can be alerted whenever the branch protection settings are changed to be out of compliance.

Zendesk provides software-as-a-service products related to customer support, sales, and other customer communications. Compliance professionals are interested in accessing the information from Zendesk because the data helps them answer important questions about their incident response controls. For instance, did the team respond to the latest security incident on time according the SLA set in the company’s incident response policy? Or, what specific things were done to resolve the issues that caused the latest incident? The Zendesk Hypersync automatically pull in data from Zendesk such as ticket details and view of tickets— making it easier for compliance professionals to test and validate their incident response controls.

Jira is a proprietary issue tracking product developed by Atlassian that allows bug tracking and agile project management. Data from Jira such as tickets and ticketing details can help compliance professionals answer important questions about their incident response controls. For instance, did team respond to the latest security incident on time according the SLA set in the company’s incident response policy? Or, did we remediate the issues identified from our last audit?  With the Jira Hypersync, compliance professionals can automatically pull in data from Jira, such as list of issues and issue details to validate their organization’s incident response controls.

The Azure Active Directory (Azure AD) enterprise identity service provides single sign-on and multi-factor authentication to help protect your users from 99.9 percent of cybersecurity attacks. The Azure AD Hypersync was built to help you speed up user access reviews; it automatically pulls information, such as list of groups and list of users, into Hyperproof in an easy-to-consume format.

Okta provides cloud software that helps companies manage and secure user authentication into applications, and for developers to build identity controls into applications, website web services and devices. By setting up the Okta Hypersync, you can automatically access reports of password policies from Okta within Hyperproof and set up automated tests to validate whether the Okta password policies of resources in Okta are adhering to your wider company password policy.

Jamf is a software company that is the developer of Jamf Pro, an application used by system administrators to configure and automate IT administration tasks for macOS, iOS, iPadOS, and tvOS devices. The product includes server and client software that runs on iOS, macOS, and tvOS. With the Jamf Hypersync, you can automatically pull in information from Jamf into Hyperproof such as disk encryption policy details, list of computers and list of devices — to validate whether your organization’s devices are configured in ways which are compliant with your policies.

Datadog is a data observability service for cloud-scale applications, providing monitoring of servers, databases, tools, and services, through a SaaS-based data analytics platform. Many organizations use Datadog for monitoring because they know that monitoring is important for a variety of reasons. For instance, being able to show that your systems were properly monitored over time is a must-have for passing IT audits. IT auditors want to see a paper trail showing that all monitors ran as they should and that incidents and events were identified and fixed according to established company policies and procedures. The DataDog Hypersync automatically pulls in data including List of Hosts, List of Monitors and List of Active Users. A compliance professional can write an automated test in Hyperproof to auto-detect when a monitor is set up incorrectly.

Azure DevOps provides developer services for support teams to plan work, collaborate on code development, and build and deploy applications.To ensure the security of code, it is important to validate that a designed approval process was followed before new code is deployed into the production environment. Hyperproof’s Azure DevOps Hypersync allows you to automatically access data from Azure DevOps to speed up security and compliance reviews, such as your deployment approval policy, a list of what was deployed in production for a definition and a list of users and members in a permission group.

Google Cloud Platform (GCP), offered by Google, is a suite of cloud computing services that runs on the same infrastructure that Google uses internally for its end-user products, such as Google Search, Gmail, file storage, and YouTube. The GCP Hypersync automatically pulls in a variety of information about how things are operating in your organization’s GCP account in real-time– making it easier for compliance professionals to validate controls around data integrity and business continuity. For instance, you can pull in reports such as SQL: Backup configuration and SQL: Backup runs into Hyperproof as proof. Then, you can write an automated test that runs whenever new proof is available to validate that the right configuration is in place for backup jobs and be alerted if it falls out of compliance.