IoT
Software // Enterprise Applications
News
10/25/2007
04:15 PM
John Foley
John Foley
Features
Connect Directly
LinkedIn
Twitter
Google+
RSS
E-Mail
50%
50%

Startup Of The Week: Aveksa Brings Discipline To Data Access

New application lets security pros, compliance specialists, and business managers collaborate in roles-based governance.

Data breaches and insider threats -- what's a company to do? Rigorous enforcement of data access policies is part of the answer. Aveksa's software lets IT managers establish data access privileges and manage who gets access to which applications. Business managers, security pros, and compliance specialists collaborate in the process.
--John Foley

AVEKSA

HEADQUARTERS: Waltham, Mass.

PRODUCT: Aveksa Enterprise Access Governance Suite

PRINCIPALS: Deepak Taneja, co-founder and CEO; Dan Peterson, co-founder, VP of field engineering; Jim Ducharme, VP of engineering; Patrick Welch, VP of sales

INVESTORS: Charles River Investors, Pequot Ventures

EARLY CUSTOMERS: Amscan, Cigna, XL Capital

Deepak Taneja, co-founder and CEO, Aveksa

Taneja's Aveksa helps brings order to chaos


THE NAPKIN PITCH
Data access management is a best practice in IT governance. Data access privileges, or entitlements, are determined by an employee's "role." In large companies, there can be thousands of roles and billions of entitlements, and they change constantly. Aveksa brings order to this chaos, reducing risk while helping companies comply with regulatory requirements.

WHAT IT'S NOT
Aveksa's software is not a security application. It leaves identity management, authentication, authorization, and provisioning to products designed for those purposes. CEO Taneja refers to such tools--sold by CA, IBM, Sun, Netegrity, and others--as the security-enforcement layer. They control user access to information. Aveksa's software is a governance layer that complements such gatekeeping tools. Says Taneja, "We think of it as a business application that deals with security data."

BACKGROUND
CEO Taneja was formerly CTO of ID management vendor Netegrity, acquired by CA in 2004. Ducharme, Welch, and other members of Aveksa's management team are of Netegrity-to-CA lineage.

WHAT'S NEW
The Aveksa 3 suite, due for release in November, comprises two applications. An update to the existing Aveksa Compliance Manager--which automates monitoring of and reporting on user access rights--features enhanced detection of identity changes and new capabilities for change management and auditing. The new Aveksa Role Manager lets security pros, compliance personnel, and business managers work together in defining roles; capabilities include role discovery, modeling, and certification.

TIMELINE
Timeline Chart

Read InformationWeek's Startup City blog

Comment  | 
Print  | 
More Insights
Building A Mobile Business Mindset
Building A Mobile Business Mindset
Among 688 respondents, 46% have deployed mobile apps, with an additional 24% planning to in the next year. Soon all apps will look like mobile apps and it's past time for those with no plans to get cracking.
Register for InformationWeek Newsletters
White Papers
Current Issue
How to Knock Down Barriers to Effective Risk Management
Risk management today is a hodgepodge of systems, siloed approaches, and poor data collection practices. That isn't how it should be.
Video
Slideshows
Twitter Feed
InformationWeek Radio
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.