SpyCloud Compass

What SpyCloud Compass is

SpyCloud Compass is represented by a product page that redirects to SpyCloud Endpoint Threat Protection, a web tool for SOC teams responding to malware-related exposure. It provides evidence of data malware stole and connects that exposure to an organization’s environment. Teams can use the identity exposure information to guide password resets, session invalidation, and access reviews, helping address risks such as account takeover, lateral movement, and ransomware. The product surfaces exposures tied to managed and unmanaged endpoints, including BYOD laptops and remote contractor devices. Monitored data types include credentials, accounts, applications, cracked passwords, session tokens, cookies, PII, and malware records. SpyCloud lists EDR, SIEM, and SOAR integrations such as CrowdStrike Falcon, Microsoft Defender, Splunk, Elastic, Google Chronicle, Palo Alto Cortex XSOAR, and Tines. Identity integrations include Active Directory, Entra ID, Okta, and Ping Identity. SpyCloud says Endpoint Threat Protection does not detect malware; it reports what malware stole. The paid Enterprise Protection plan is tiered by the number of employee accounts protected, with pricing available on request. Support options include weekday business-hour Base Support and Premium Support with 24/7 coverage for critical and high-severity issues.

Who it suits

SpyCloud Endpoint Threat Protection suits SOC teams working to remediate malware-infected users and applications. It is relevant to organizations that need exposure information across managed and unmanaged endpoints and response workflows for compromised credentials and session tokens.

Limits

The Enterprise Protection plan is tiered by the number of employee accounts protected, and its price is available on request. Endpoint Threat Protection does not detect malware.

Getting started

1. Visit the SpyCloud product page.
2. Use the web product for SOC exposure and remediation workflows.
3. Request pricing for Enterprise Protection, which is tiered by employee accounts protected.
4. Choose Base Support or Premium Support based on the stated coverage options.

Verdict

Consider SpyCloud Compass if your SOC needs malware-theft exposure evidence linked to its environment and workflows for remediation. Look elsewhere if malware detection itself is the main requirement, since SpyCloud says Endpoint Threat Protection reports stolen data rather than detecting malware.