Maintaining of up-to-date data about existing information assets, security vulnerabilities assessment and compliance management of modern heterogeneous multilevel information systems represent a complicated problem. Quick installation of new components, changing assortment of platforms and applications, IT-outsourcing, and ever-altering security threats additionally complicate the issue.

The MaxPatrol system allows one to automate and centralize the processes of vulnerabilities assessment, information security monitoring, and compliance management in information systems of any scale, which makes it possible to obtain the complete data on the security state of the entire system and its separate subsystems in due time.

MaxPatrol is the only product in the global market that combines the mechanisms of system checks, penetration testing, and compliance management in aggregate with analysis of various operating systems, database management systems (DBMSs), complex application system such as SAP Netweaver and custom web-applications.

The MaxPatrol system supports automation of such important processes of IT and IS management as resource inventory, vulnerability assessment, compliance management, change management and measure of IT and IS processes with security metrics and KPI.

The processes of inventory, security evaluation and control of security policies are often performed either not regularly or with long intervals. As a result, the information becomes non-actual and the situation gets out of hand. The comprehensive approach and smart automation tools implemented in MaxPatrol ensure minimization of IS monitoring efforts, which allows one to detect the problems promptly and, consequently, improve the information system security. Using the extensive MaxPatrol knowledge base, which is constantly updatable, specialists can promptly develop standard patterns of system configuration, locate the systems that are inconsistent.

In contrast to traditional single-purpose security scanners, MaxPatrol combines analysis of network equipment, operating systems, applications, databases, and web-applications. This approach allows one to use the only tool to control the security of compound information systems including Cisco network equipment, different platforms like Windows, Linux, and Unix, Microsoft SQL and Oracle database servers, SAP Netweaver applications, various network systems, and custom web-applications.