News Releases3 min read

Kroll Joins “Bit9 + Carbon Black Connect” Alliance Program as Incident Response Partner

Kroll uses Carbon Black to rapidly detect and respond to attacks and accelerate remediation efforts for enterprise customers

WALTHAM, Mass.—August 5, 2014—Bit9® + Carbon Black®, the leader in endpoint threat prevention, detection and response, today announced that Kroll, the global leader in risk mitigation and response solutions, has joined the “Bit9 + Carbon Black Connect” Alliance Program as an incident response partner.

As a “Connect” IR partner, Kroll uses the Carbon Black solution to help enterprise customers remediate cyber attacks and breaches. As the Kroll team identifies malicious files used to execute an attack, Kroll uses Carbon Black to pinpoint each endpoint and server on which malware has landed and reveal the entire “kill chain” of the attack, so responders can quickly see where and how the attack started. This enhanced visibility enables Kroll to move rapidly to contain attacks and accelerate remediation efforts.

“Equipping our expert teams with Carbon Black streamlines the response and recovery process more than ever before,” said Timothy P. Ryan, Kroll’s managing director and head of the cyber investigations practice. “By joining this program, we are combining the best people and best technology on the market to battle against advanced attacks and targeted malware.”

Kroll is recognized as an industry leader for its seamless end-to-end capabilities, extending from proactive assessment and intrusion testing to data breach notification and identity theft monitoring. With its incident response services, Kroll leverages a global network of certified security and forensic experts to respond quickly to security incidents, whether the incident is the result of a malicious attack or internal security issues. Able to be onsite within hours, Kroll’s response team quickly helps an organization contain a breach and determine the next steps.

“Incident response is no longer a ’post-mortem’ process of determining and trying to remediate the damage done by a cyber attack after it occurs,” said Tom Barsi, vice president of business development for Bit9 + Carbon Black. “Today, incident response is a continuous process of proactively preparing for a breach by detecting, responding to and remediating threats—as they happen—before major damage is done. The combination of Kroll’s in-depth investigative and incident response experience with Carbon Black’s innovative ability to detect and respond to threats in real time will provide companies with a unique defense against cyber attacks.”

About the “Bit9 + Carbon Black Connect” Alliance Partner Program
The “Bit9 + Carbon Black Connect” Alliance Partner Program integrates the leading endpoint and server security solution from Bit9 + Carbon Black with solutions from top companies in four categories:

  • Incident response
  • Managed security services
  • Threat intelligence
  • Network security, analytics and SIEM

This enables enterprises to create a unified defense against cyber threats. Enterprises that deploy the Bit9 Security Platform and/or Carbon Black with certified alliance partners’ offerings experience a fully integrated strengthening of their security posture, a decrease in their total cost of ownership, achievement of faster deployment times, and gain increased value from their integrated solutions.

About Kroll
Kroll is the leading global provider of risk solutions. For over 40 years, Kroll has helped clients make confident risk management decisions about people, assets, operations, and security through a wide range of investigations, due diligence and compliance, cyber security, physical and operational security, and data and information management services. Headquartered in New York with more than 55 offices across 26 countries, Kroll has a multidisciplinary team of nearly 2,300 employees and serves a global clientele of law firms, financial institutions, corporations, non-profit institutions, government agencies, and individuals.

For more information visit

About Bit9 + Carbon Black
Bit9 + Carbon Black offers the most complete solution against the advanced threats that target your organization’s endpoints and servers. This makes it easier for you to see—and immediately stop—those threats.

Carbon Black’s lightweight endpoint sensor, which can be rapidly deployed with no configuration to enable detection and response in seconds, combined with Bit9’s industry-leading prevention technology, delivers four key benefits:

  • Continuous, real-time visibility into what’s happening on every computer
  • Real-time threat detection, without relying on signatures
  • Instant response by seeing the full “kill chain” of any attack
  • Prevention that is proactive and customizable

Thousands of organizations worldwide—from 25 Fortune 100 companies to small businesses—use Bit9 + Carbon Black to increase security, reduce operational costs and improve compliance. Leading managed security service providers (MSSP) and incident response (IR) companies have made Bit9 + Carbon Black a core component of their detection and response services. With Bit9 + Carbon Black, you can arm your endpoints against advanced threats. For more information, visit our website.



Bit9 and Carbon Black are registered trademarks of Bit9, Inc. All other company or product names may be the trademarks of their respective owners.