Securing Government Agencies Against Cyber Threats

Comprehensive Protection Against Cyberattacks and Insider Threats

Compliance Simplified

Federal agencies are under pressure to improve cyber security by focusing on continuous diagnostics and mitigations (CDM), FISMA, NIST and agency standards.

Ensure Security

Tripwire delivers the most robust suite of security controls for asset, vulnerability, configuration and risk management, providing security intelligence and evidence of compliance.

Cyber Situational Awareness

Tripwire helps agencies prioritize critical assets across the network and implement a framework of foundational security controls to continuously monitor information assets to improve risk posture.

SANS Webcast: Reducing Federal Systems Risk with the SANS 20 Critical Controls


Additional Resources

Implementing FISMA SI-7

Achieving FISMA Compliance

Unified Security Intelligence

Tripwire's integrated suite provides unified security intelligence through the monitoring and delivery of rich context around changes, configurations, vulnerabilities and threats.

Feature & Benefits

Transform Your Controls For Continuous Monitoring

Federal security directives require agencies to continuously monitor their systems for cyber threats and implement regular threat assessments. Tripwire transforms static security control assessment processes into automated security information collection, enabling continuous risk assessment, compliance and highly responsive security programs. This focus on risk monitoring and analysis improves the overall posture, awareness and responsiveness of security programs.

Achieve and Maintain Continuous Compliance

Tripwire enables government agencies to identify, classify and mitigate vulnerabilities and automate compliance and audit reporting. Tripwire automation for security risk management integrates with continuous compliance goals and reduces time and effort for Certification and Accreditation (C&A). Tripwire solutions are designed to support the reporting and monitoring requirements of FISMA regulations, CyberScope reporting, FDCC and USGCB, DISA STIGs, and support key security program management. Tripwire has a track record for building best-in-class technology, meeting Federal compliance requirements and integrating standards such as FIPS 140, Common Criteria and SCAP.

Deliver The First Four Critical Security Controls

Many federal agencies use the Critical Security Controls (CSC) because it provides continuous monitoring, sequences IT control implementations and understands budgets and the impacts of these implementations. As these controls map to NIST 800-53, the Critical Security Controls are promoted by the OMB and DHS as the roadmap for continuous monitoring. Tripwire products help your agency achieve the goals of that roadmap by contributing to 16 of the 20 controls. Tripwire solutions fully address the first four foundational controls for visibility (inventory of hardware and software) and reducing the attack surface (security configuration and vulnerability management), which are shown to reduce risks and assure an effective defense against current and future cyber threats. The data from these processes are essential for proper implementation of other controls such as application software security, boundary defense and security audit logging.

With Tripwire, we are now more proactive against the threat of data breaches. This level of security gives our customers even more confidence in our services, and provides eWAY with a business differentiator in the marketplace.


Our experience using it has proven Tripwire VIA to be the right choice. It's a powerful tool. There are so many possibilities and so much it can do. We want to take full advantage of it.