Akamai Guardicore Segmentation
Software-based microsegmentation with traffic visibility.
Network Segmentation
Network segmentation and microsegmentation
One compromised machine can no longer reach everything else.
Addresses 269 stories in our coverage in the last 90 days 3 products that provide it
What it is
Dividing the network so that systems can only talk to what they need, from coarse zones (office, servers, production) down to rules per workload.
How to value it
Ransomware becomes a company-wide outage when it can spread freely from the first infected laptop. Segmentation limits the blast radius: an incident in one zone stays there, which can be the difference between a bad day and weeks of downtime.
Questions to ask a vendor
- 1Can it map current traffic flows before we enforce any rules?
- 2Does it work across data centre, cloud and endpoints?
- 3How do we avoid breaking business applications during rollout?
- 4Can it isolate a segment quickly during an incident?
For your risk register
- Risk
- Malware spreads from one system to the whole environment.
- Control
- Segmentation of critical systems with default-deny rules.
- Owner
- Network lead.
- Measure
- Share of critical assets in enforced segments.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
Illumio Segmentation
Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.
Zero Trust Endpoint Firewall
Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.
Recent stories it addresses
673 stories in total- 13 Nov 2026Ransomware at the hypervisor layer: how attackers use ESXi and vCenter features for malicious purposes
BlackNevas ransomware group targets VMware ESXi and vCenter, destroying VMs and backups.
- 13 Nov 2026Beast Ransomware Uses Hidden ‘666’ Control Panel to Encrypt Windows Systems and Network Shares
Beast ransomware features hidden GUI control panel activated via ALT+CTRL+666 for selective encryption.
- 12 Nov 2026New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacks
New SCKit malware targets MSPs via ScreenConnect attacks, exploiting a vulnerability to spread.
- 12 Nov 2026New N-able N-central Zero-Day Exploits Target Patched Servers, Claiming Unauthenticated Root Access
New N-able N-central zero-day exploits target patched servers, granting unauthenticated root access.
- 12 Nov 2026Critical Red Hat Quay Vulnerability Allows Unauthenticated Attackers to Hijack Container Registries
Critical Red Hat Quay vulnerability (CVE-2026-123710, CVSS 9.8) allows unauthenticated token hijacking.
- 12 Nov 2026Critical MongoDB Flaw Lets Attackers Crash Database Servers With Just Two Ping Requests
Critical MongoDB flaw allows remote attackers to crash database servers with two ping requests.
- 12 Nov 2026Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs
Google Cloud VMs on AMD Turin chips vulnerable to three CPU side-channel flaws.
- 12 Nov 2026Siemens Building Automation and Energy Products
Siemens products affected by critical PHP vulnerabilities 'php2shell'
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.