Lynx
Automated Security Compliance
An agent-based, enterprise-grade security tool to enable compliance and Continuous-ATO.
Why Lynx
The Federal Government requires security compliance to keep pace with foreign threat actors. Lynx, an agent-based security solution, enables scheduled and recurring scans and Continuous ATO through our next-generation OVAL engine.
Automate the Scanning of Your Enterprise
Automated scanning across different operating systems to include Linux, Windows, and MacOS.
Report Without the Paperwork
Generate compliance packages to reduce the documentation burden on AOs and ISSMs.
Achieve Continuous-ATO
Automated, scheduled scans with full historical logs and trending to provide a digital trail of an environment’s security posture over time vs. a moment in time.
Designed the Right Way
Next-Generation OVAL Engine
A next-generation engine with no OpenSCAP dependency, eliminating a critical supply chain risk.
Role-Based Access Control
Configurable RBAC to enforce separation of duty and ensure continuity with best security practices.
Lynx Broker
While Lynx can operate with an agent, the Lynx Broker enables air-gapped operations and manual override for sneakernet needs.
Enclave Authentication
Authentication in your enclave with OAuth 2.0, AD, and LDAP integrations.
Beyond the legacy SCAP Compliance Checker
| Feature | Legacy SCC | TeraSense Lynx |
|---|---|---|
| Architecture | Monolithic | Microservices |
| Deployment | Manual installs, downloads, and scans | Automated deployments and continuous updates |
| Scalability | Single local workstation | Cloud-native, multi-cloud, dynamic scaling |
| Cost | High service and software costs | Reduced through automated scans and reporting |
| ATO | False failures and manual operations | Continuous ATO with intelligent scan profiles |
| Collaboration | Single user, no enterprise visibility | Multi-tenant, multi-user, full RBAC |
| Engine | Legacy OpenSCAP | Next-generation OVAL engine |
Lynx Advisor
Machine-speed offense demands machine-speed defense. Lynx Advisor brings agentic AI to security compliance, an automated security approach.
- AI Compliance Agent
- Interpret controls in context, generate automated POA&M entries for eMASS upload, and generate OSCAL machine-readable files.
- AI Vulnerability & Reporting Agents
- Correlate CVEs against live system topology and prioritize findings by exploitability and mission impact.
- Streamlined Threat Triage
- Reduce triage response times, with an API-first design for ticketing integrations.