Furl

Furl's integration and automation platform revolutionizes how organizations manage their technological infrastructure by providing sophisticated tools for integration development, AI-driven remediation, and seamless experience management. This comprehensive platform addresses critical challenges in vulnerability management, endpoint security, and system integration, offering robust solutions that bridge the gap between manual processes and automated tools. Through itsspec-driven development framework and AI-powered remediation capabilities, Furl demonstrates how sophisticated security architecture can protect even the most complex IT environments while maintaining operational efficiency.

Integration Development Framework

The integration development framework employs a spec-driven approach with generated boilerplate, including support for OAuth 2.0 connections. The development process begins with initialization via go run cmd/furl/main.go init {integration_identifier} and proceeds through multiple stages including connection implementation and action-trigger development. Each integration follows a structured spec.yaml file that defines the integration's name, connections (using OAuth examples), actions, and triggers, with detailed guidance provided for widget creation and functionality implementation.

The platform supports both new integration creation and updates to existing integrations, significantly reducing development effort through automated code generation. The complete development lifecycle includes testing and potential community contribution, ensuring that all integrations maintain high operational standards while allowing for rapid iteration and improvement.

AI-Powered Remediation and Orchestration

Furl's AI capabilities streamline vulnerability remediation through automated investigation and prioritization. The platform reduces mean time to remediate (MTTR) from 101 days to 15 days by synthesizing data across multiple IT and security tools into clear, actionable reports. The AI ensures low-risk adjustments can be implemented immediately, minimizing disruption to operations.

The system maintains operational context through continuous learning with customer feedback and industry best practices. Built by veterans from leading security firms, the AI maintains full traceability for transparent decision-making. Current security reports indicate significant improvements in vulnerability management, with 90% of security and IT professionals reporting improved effectiveness through automated processes.

Automated investigation streamlines the remediation process, while prioritization focuses on vulnerabilities with the lowest operational impact. The platform effectively coordinates between security, IT, and end-user remediators, particularly for complex scenarios involving unmanaged software. Organizations face challenges in either locking down devices or denying specific software use, both of which can impact productivity and operational flexibility.

The solution addresses two primary unmanaged software scenarios: coordinating with end-users for software removal or patching, and implementing security policies that balance risk management with user productivity. While current tools reduce manual labor by 60%, significant improvements stem from automation and AI integration, demonstrating substantial potential for further productivity gains in vulnerability remediation.

Experience Creation and Management

The experience creation and management process begins with logging into the Furl platform, where users access the Dashboard and initiate a new experience through the "Create New Experience" feature. The platform utilizes a Designer interface that simplifies the development workflow. Users add activities using the "Add New Activity" button, configure these activities via a dynamic input mechanism, and name the experience before enabling it.

Running the experience involves toggling the activation switch and providing input text, with results viewable on the Dashboard. Specific activity results can be accessed through the platform's navigation menu, where users select the experience from their "My Experiences" list. The system generates output within the activity's Outputs section, providing clear documentation of the experience's execution.

The platform supports both basic integration development and advanced functionality enhancements. To create a new experience, users follow these steps:

1. Log in to Furl and access the Dashboard

2. Initiate a new experience through "Create New Experience"

3. Utilize the Designer interface

4. Add activities by clicking "Add New Activity" in the bottom right corner

5. Configure activities by clicking the activity to display the configuration menu

6. Set up dynamic inputs by typing {{long_text}} in the "Content" field

7. Configure activities to use dynamic inputs

8. Name the experience and enable it

9. Run the experience by toggling the activation switch and providing input text

10. View results on the Dashboard

11. Access specific results through the platform's navigation menu, selecting the experience from "My Experiences"

12. Review summary output in the activity's Outputs section

The underlying security framework adheres to strict SOC 2 Type II compliance standards (effective April 2024), ensuring robust protection for customer data. Data storage employs S3 bucket encryption with row-level customer data segmentation for enhanced isolation. All external communications utilize NIST cryptographic standards for transmission security. Secure secret management practices store all sensitive information in an encrypted vault, accessible only to authorized personnel.

The platform incorporates comprehensive security measures, including centralized endpoint protection through mobile device management software, 24/7 monitoring, disk encryption, and strict software update policies. Annual mandatory security training covers essential topics like phishing prevention and password security. All third-party vendors gain access to systems or data only after successful security reviews, ensuring alignment with Furl's rigorous security standards.

Endpoint and Server Vulnerability Remediation

While automated tools have reduced vulnerability management workloads, many organizations struggle with the remaining manual tasks required to fully address endpoint and server vulnerabilities, according to data from Tenable and BigFix. The mean time to remediate (MTTR) remains stubbornly high, with 90% of security and IT professionals reporting ineffective vulnerability management processes. In fact, 85% of vulnerabilities remain unremediated after 30 days, highlighting the significant gap between automated tooling and complete vulnerability closure.

The challenges primarily stem from the "last mile" problem - the complex process of coordinating between security, IT, and end-user remediators when managing unpatchable software or server vulnerabilities. Currently, IT teams are responsible for patching managed software through existing automation tools. However, they lack the necessary information and tools to address the remaining 15% of vulnerabilities affecting endpoints and servers.

When it comes to unmanaged software, organizations face two main challenges: user coordination and policy enforcement. IT teams must work with end-users to determine whether to remove, patch, or request exceptions for unpatched software. This requires careful monitoring and guidance to balance security needs with end-user productivity requirements. Additionally, organizations must choose between device lockdown policies that prevent installation of untracked software or restrictive software usage policies that can impede legitimate business operations.

Organizations seeking to improve their vulnerability management processes should focus on three key areas: automation, prioritization, and collaboration. Automated investigation and remediation tools, when combined with proper implementation and usage, can reduce MTTR from 30-60 days to just 15 days. However, current tools often fall short of complete automation, requiring manual intervention for the most complex cases.

Looking ahead, the future of vulnerability remediation lies in AI-powered solutions that can automate and optimize the process even further, according to data from the 2024 Verizon Data Breach Investigations Report. Generative AI technologies can help address these challenges by providing contextual information that reduces triaging time and helps remediators make faster decisions. While significant improvements are possible through automation and AI integration, organizations must ensure they are using these technologies correctly to avoid common pitfalls like "hallucinations" that can lead to ineffective remediation strategies.

Security Architecture

Furl's security framework addresses multiple dimensions of system protection, from data storage and transmission to third-party management and employee training. The platform adheres to SOC 2 Type II compliance standards, effective as of April 2024, ensuring alignment with key security best practices.

Data storage security employs S3 bucket encryption and implements row-level customer data segmentation for enhanced isolation. External data transmissions utilize NIST cryptographic standards to protect information in transit. All sensitive secrets are stored in an encrypted vault, accessible only to authorized personnel, demonstrating sophisticated secret management practices.

Endpoint security focuses on centralized management through mobile device management software, with continuous 24/7 security monitoring and enforced disk encryption and screen lock configurations. The platform maintains strict software update policies to protect against known vulnerabilities. To ensure organizational security, Furl conducts annual mandatory security awareness training covering essential topics like phishing prevention and proper password management.

The company maintains rigorous standards for third-party vendor management, conducting comprehensive security reviews before granting access to systems or data. All vendors must demonstrate alignment with Furl's security policies and procedures before being granted any level of system access. The security architecture also incorporates automated vulnerability scanning tools, avoiding single-provider dependencies through diverse solution implementations.

The framework supports both managed and unmanaged environments, providing tailored solutions for both enterprise and small business customers. Through centralized management and automated security updates, the platform reduces the attack surface while maintaining user productivity. The security architecture balances robust protection with operational efficiency, demonstrating a comprehensive approach to cybersecurity in the Furl platform.