3 ms·

Are they a cybersecurity company? I thought they were more about IAM. I realize this is the CNBC headline, but I am curious if Duo does something I was unaware

Are they a cybersecurity company? I thought they were more about IAM. I realize this is the CNBC headline, but I am curious if Duo does something I was unaware of, like rev. engineering, pen. testing, etc. ps - congrats to Duo!

johnmaguire2013 8y ago
Doesn't do identity, relies on external IAM. Look into Duo Beyond.
- mtgx 8y ago
  Duo Beyond was a very smart move on their part, taking Google's enterprise security architecture and turning it into a third-party turnkey solution for enterprise customers. They did it before Cloudflare, too. I bet that is a big part of the reason why Cisco is paying so much now.
  - hb3b 8y ago
    There isn't anything particularly innovative about Duo Beyond. Inspect the Docker containers and you'll see they simply rebranded simplesamlphp and wrote a custom ngx_http_auth_request_module handler for NGINX for their authenticated reverse proxy product. If Cisco paid 2 billion dollars for this, my mind is really blown. I'm struggling to figure out how they ended up at 2 billion because I don't see it in anything material -- perhaps the patents or a play against Okta for recurring revenue from smaller companies which might not have Cisco gear?
    - trhway 8y ago
      Cisco didnt pay $2B for simplesamlphp, they paid it for "Duo Security provides cloud-based tools to prevent security breaches on devices." :)
- throwaway5752 8y ago
  Interesting, thank you!
castillar76 8y ago
Not to be too sticky about it, but IAM is cybersecurity. There's a lot more to security than reverse engineering, pen-testing, and vulnerability research.
- throwaway5752 8y ago
  Sorry for making it about semantics when it should be about celebrating Duo and discussing the acquisition. I just don't love the term "cybersecurity" in the first place because HR (training, background checks) and facilities (physical security) are just as important to an overall security posture. I think proper IAM policy and implementation are part of that and none of them succeed in isolation.
  - castillar76 8y ago
    That's an excellent point! It would be good to get away from 'cybersecurity' as a term and more towards focus on general security. You're right that none of these succeed in isolation. :)
geofft 8y ago
I've never been clear about the connection to the core business but Duo Labs does a lot of vulnerability research / reverse engineering. https://duo.com/labs https://duo.com/labs
DEADBEEFC0FFEE 8y ago
They are increasingly adding features that check the health and security of endpoints. So not unlike some MDM.

johnmaguire2013 8y ago

Doesn't do identity, relies on external IAM. Look into Duo Beyond.

mtgx 8y ago
Duo Beyond was a very smart move on their part, taking Google's enterprise security architecture and turning it into a third-party turnkey solution for enterprise customers. They did it before Cloudflare, too. I bet that is a big part of the reason why Cisco is paying so much now.
- hb3b 8y ago
  There isn't anything particularly innovative about Duo Beyond. Inspect the Docker containers and you'll see they simply rebranded simplesamlphp and wrote a custom ngx_http_auth_request_module handler for NGINX for their authenticated reverse proxy product. If Cisco paid 2 billion dollars for this, my mind is really blown. I'm struggling to figure out how they ended up at 2 billion because I don't see it in anything material -- perhaps the patents or a play against Okta for recurring revenue from smaller companies which might not have Cisco gear?
  - trhway 8y ago
    Cisco didnt pay $2B for simplesamlphp, they paid it for "Duo Security provides cloud-based tools to prevent security breaches on devices." :)
throwaway5752 8y ago
Interesting, thank you!

castillar76 8y ago

Not to be too sticky about it, but IAM is cybersecurity. There's a lot more to security than reverse engineering, pen-testing, and vulnerability research.

throwaway5752 8y ago
Sorry for making it about semantics when it should be about celebrating Duo and discussing the acquisition. I just don't love the term "cybersecurity" in the first place because HR (training, background checks) and facilities (physical security) are just as important to an overall security posture. I think proper IAM policy and implementation are part of that and none of them succeed in isolation.
- castillar76 8y ago
  That's an excellent point! It would be good to get away from 'cybersecurity' as a term and more towards focus on general security. You're right that none of these succeed in isolation. :)

geofft 8y ago

I've never been clear about the connection to the core business but Duo Labs does a lot of vulnerability research / reverse engineering. https://duo.com/labs https://duo.com/labs

DEADBEEFC0FFEE 8y ago

They are increasingly adding features that check the health and security of endpoints. So not unlike some MDM.