Microsoft's Forefront group eying compliance market

Microsoft has developed vulnerability assessment and compliance software that it hopes to roll into its Forefront product line.

Security vendors, Symantec and McAfee, may soon find Microsoft competing with them in a new market.

Microsoft has developed network-scanning technology, internally known as Spider, that scans PCs for security vulnerabilities, ensures that the latest patches are installed and that PCs have the required software to put them in compliance with corporate IT policy.

The software was developed by Microsoft's IT group to clamp down on security problems within Microsoft's own network, but the company is now looking at adapting it for its Forefront line of security products, a director with Microsoft Information Security, Mark Estberg, said at the SecureWorld Expo.

Some customers can already get access to the Spider technology through Microsoft's services group, he said.

"The goal is to get this software written into products that go out to customers, but as a near-term step, through services, you can get this software now," Estberg said.

The software had been a success at Microsoft, although his team received some "incredibly articulate hate mail" in the early days, after instituting a policy of cutting off Microsoft users whose PCs were not in compliance, he said.

"It's really, really painful ... but it made a big impact," Estberg said.

The software could scale to a large number of machines and was used to scan Microsoft's corporate network several times per day, Estberg said. It was agentless, requiring no additional software be installed on the client.

As Microsoft's entrance into the security market has begun to threaten their core antivirus product offerings, vendors such as McAfee and Symantec have been increasingly focused on developing products that can be used to enforce IT compliance.

McAfee, in particular, has been on a shopping spree in this area. It recently purchased Onigma, an Israeli vendor of data-leak prevention software, and Preventsys, a provider of risk management and compliance reporting software. McAfee is also in the process of closing its $US60 million acquisition of compliance vendor, Citadel Software.

Microsoft is in a position to simplify security for its customers by giving them one point of contact, said one show attendee, a San Francisco area IT risk manager who asked not to be identified. But that convenience could come at a price, he said: a lack of accountability and competition in the security space. "It boils down to the question, who's checking the checker."

Clearly, compliance is a growth area for the security industry, but with tensions already high between Microsoft and its security partners, it was unclear how quickly the company will move into this new market, program manager with Yankee Group's Security Solutions & Services Decision Service, Andrew Jaquith, said.

"The question is exactly how much more do you want to antagonise them?" he said.

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Robert McMillan

IDG News Service
Show Comments

Brand Post

Most Popular Reviews

Latest Articles


PCW Evaluation Team

Jack Jeffries


As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr


The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Aysha Strobbe

Microsoft Office 365/HP Spectre x360

Microsoft Office continues to make a student’s life that little bit easier by offering reliable, easy to use, time-saving functionality, while continuing to develop new features that further enhance what is already a formidable collection of applications

Michael Hargreaves

Microsoft Office 365/Dell XPS 15 2-in-1

I’d recommend a Dell XPS 15 2-in-1 and the new Windows 10 to anyone who needs to get serious work done (before you kick back on your couch with your favourite Netflix show.)

Maryellen Rose George

Brother PT-P750W

It’s useful for office tasks as well as pragmatic labelling of equipment and storage – just don’t get too excited and label everything in sight!

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?