UltraViolet Cyber Inc. has introduced Equinox, a platform designed to evaluate the effectiveness of existing security tools against the MITRE ATT&CK framework. The system automates the analysis of detection rules and log sources, reducing a process that typically takes weeks to under 30 minutes.
The platform generates a coverage map and scorecard, identifying gaps and recommending specific detections. The company's Threat Intelligence and Detection Engineering team reviews and backtests these recommendations against customer telemetry before implementation. A separate report quantifies the potential coverage gain from new data feeds.
In a recent customer trial, the implementation of recommended detections increased coverage from 59 to 136 out of 222 techniques, representing a 34.7 percentage point improvement. The company also noted that the average enterprise SIEM detection coverage is approximately 21 percent, citing a June 2025 report.
Equinox also provides assessments based on the MITRE ATLAS framework, which focuses on threats to artificial intelligence and machine learning systems. The company claims to be the first to offer a full coverage map and scorecard for this specific framework.
The service is included for managed customers as part of the company's security operations center offering, with assessments conducted during onboarding and quarterly. Independent organizations can purchase Equinox as a standalone engagement. It currently supports tools from SentinelOne, CrowdStrike, Elastic, and Panther Labs, with Splunk and Microsoft Defender support in development.
UltraViolet Cyber was formed in April 2023 by Achieve Partners through the merger of Metmox, Mosaic451, Stage 2 Security, and W@tchTower. Based in McLean, Virginia, the company acquired Black Duck Software’s application security testing services in September 2025 and is ranked 19th on the MSSP Alert Top 250 list.
