Lock down your SOC remediation actions with strict two-factor authentication.
The platform that orchestrates your security must not turn against you. Akuity SOC incorporates multi-factor verification (MFA/TOTP) requiring an AAL2 assurance level before any critical remediation action.
Why is the classic MFA of SOC tools a dead end?
Unlimited initial login: Once logged in, the analyst has absolute and constant privileges without further control.
AAL2 validation to token: Each remediation action requires an elevation of privileges validated by MFA.
Obsolete methods(SMS or simple push) sensitive to SIM swapping or notification fatigue.
standardized TOTP: Cryptographic temporary codes via Microsoft or Google Authenticator.
Direct unfiltered calls: An attacker bypassing the front-end can send direct instructions.
Strict Middleware Blocking: Physical rejection of any API request not having the AAL2 level.
How Akuity SOC secures your operations
The AAL2 Level Requirement
Classic connection = AAL1 (insufficient). If a user attempts network isolation, themiddleware intercepts the calland requires TOTP validation to raise the token to AAL2.
Standardized TOTP Enrollment
Enrollment QR Code scan with standardTime-Based One-Time Password. Absolute compatibility with Microsoft Authenticator, Google Authenticator and Authy.
Traceability of MFA Events
All steps (activation, validation, deactivation) write to the SOC 2 audit logs immutably. AlertsMFA_ENABLEDare generated continuously.
Attempted exploitation by session theft
The Initial Session Flight
AAL1 accessAn attacker steals an analyst's password through Phishing and accesses the dashboard under the identity AAL1.
Intrusion blocked at source
Middleware VerificationThe hacker tries to send a client password reset command. The middleware instantly validates the JWT.
Rejection of the order
Rejection & AlertThe session does not have the required AAL2 level. The attacker is redirected to the TOTP screen. The attack fails, your data remains waterproof.
Dig deeper into SOC operational security
AAL1 vs AAL2 Assurance Standard: A password is no longer enough in SOC
Protecting the access of your SOC team requires absolute security. Learn the difference between AAL1 and AAL2 (MFA) insurance standards.
SOC security: Why choose TOTP over SMS (MFA)
Double authentication via SMS is vulnerable to SIM Swapping and Phishing. Find out why your SOC should use TOTP (AAL2) applications.
Middleware and API Security: Block unauthenticated remediation
Securing the web interface (Frontend) of a SOAR is not enough. Learn how Akuity's Next.js Middleware blocks API requests without MFA AAL2 sessions.