Cork Products

Cork has two primary products, Vantage and Protect.

Cork Vantage

Cork Vantage is the platform or portal you interact with to understand client and asset security posture. With over 100 supported API integrations, you can connect all of your existing security tools without needing another agent.

These connections allow you to aggregate normally fragmented data into a single dashboard. You will be able to quickly identify what assets or clients are missing certain tools, or even things you may have forgotten about that are still consuming licenses today.

A lot of these things happen as you scale your business, and Cork is here to provide an easy to use and understand platform so you can continue operating as efficiently as possible.

Cork Protect

Cork Protect is our financial protection product. Cork Protect provides financial assurance in the event of certain cyber incidents for your clients. You can deploy coverage for your clients (Protect) or for your internal MSP/Partner (Insight). Cork Clients must meet certain eligibility requirements, read more: 📄 Warranty Eligibility

Each financial protection package comes with a virtual credit card that can be activated when a cyber incident occurs.

Protect is available for $25,000, $50,000, $100,000, and $500,000 annual coverage.

Insight is available for the MSP for $100,000 or $500,000 annual coverage.

The table below is our standard coverage for each financial protection package.

Sublimits subject to change

Protect25

Cork (Mapped) Clients and Assets

Clients and assets are the building blocks for everything the Vantage platform is capable of, including observability, risk management, and financial protection.

Cork Clients

A Cork or mapped client is a group of clients or tenants from individual integrations. Cork clients are foundational for many core workflows and enrichment in Cork, including compliance events, software vulnerabilities, and financial protection.

Originally, Cork clients were automatically created from an RMM integration since Cork considered RMM as a good source of truth for client discovery. However, with the release of suggested and automated mappings, Cork creates Cork clients more intelligently by comparing assets within each tenant from each integration.

Cork clients can also be created manually by mapping two clients from one or more integrations together, and existing mappings can be broken apart in the event of an error or reorganization.

Cork Assets

A Cork or mapped asset is a group of assets from individual integrations that have been associated with a Cork client. These assets can either be devices, users/inboxes, or domains. Cork assets are the fundamental requirement for Cork's compliance events, as each Cork asset may have one or more compliance events associated with it.

📄 Software Vulnerabilities are also associated directly with a Cork device.

Cork will automatically map assets within the same Cork client if there are matching properties. Devices and users have different properties.

• A device can be matched on hostname, local IP address, MAC address, or serial number. The most confident match will result in mapping a device to a Cork asset.

• Users can be matched on their primary email address, full name, or any email aliases Cork is able to infer. Email addresses have the highest confidence.

Cork assets can be created manually within the clients' detail page, and they can also be broken apart in the event Cork mistakenly identified two different assets as one.

Risk vs Compliance Events

Risk vs Compliance

While risk and compliance can imply similar outcomes, it is important to know the differences within the Cork Vantage Platform.

All compliance events are risk-based, but not all risk events are compliance-based.

The primary differentiator is whether or not the client with the event has active Cork Protect financial protection. When the client has financial protection, all events are compliance-based, and their cure periods are taken into consideration during a Cork Protect claim.

All events' cure periods follow best practices in terms of time-to-remediation, and are good indicators, or signals, of risk.

You can read more about Cork's compliance events here.

Managing Risk

Occasionally the number of events can seem like a lot, however in certain environments, like co-managed, it may be difficult to clear them if you do not fully own the asset the event is related to. Within Cork Vantage, it is very easy to 📄 Silence Notifications & Manage Risk, however it is important to note that there are two options when silencing or managing risk.

Maintain Coverage: Reducing the noise due to technical limitations, or compensating controls. If the client has Cork Protect, then the asset is still covered in the event of a claim, however you may need to provide additional evidence that supports the technical limitation or compensating control.

Decline Coverage: You may explicitly want to decline Cork Protect coverage on a specific asset if you know you will never intend to make a claim against that asset. When you do that, all events are silenced, the asset is treated as non-billable, and will be denied if an incident occurs related to the asset.