SolarWinds provides IT management and observability software that helps organizations oversee their technology infrastructure. Its platform gathers performance and configuration data from devices, applications, and services and presents dashboards, alerts, and automated workflows to detect and resolve issues across on-premises, cloud, and hybrid environments. It stands out by offering a single, scalable ecosystem that covers network, systems, databases, applications, and IT service management, supported by a broad partner network and a history of strategic acquisitions. The company aims to help IT teams and MSPs prevent outages, optimize performance, and maintain security and compliance in diverse environments.
Company Size
1,001-5,000
Company Stage
IPO
Headquarters
Austin, Texas
Founded
1999
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
Health Insurance
Paid Vacation
Paid Holidays
Remote Work Options
Flexible Work Hours
Wellness Program
Mental Health Support
Phone/Internet Stipend
Home Office Stipend
SolarWinds has launched Avior, a standalone agentic AI system for mission-critical IT environments. The Austin, Texas company announced the product on October 14, 2026. Built on the SolarWinds Platform, Avior lets IT teams set goals, coordinate specialised agents, and track measurable outcomes across hybrid systems. Risk-tiered autonomy means potentially dangerous actions need explicit human approval. Avior can reduce alert noise, remediate configuration drift, ensure configuration backups, and manage capacity, cost, and asset lifecycle. It works with self-hosted and SaaS environments without data migration. "Organizations need to move proactively, reduce operational risk, and build resilience into the way IT work gets done," said Cullen Childress, interim chief executive officer and chief product officer. Avior is available now through a guided onboarding program.
CyberKnight strengthens zero trust ecosystem at GISEC Global 2026 with dual industry awards and more. CyberKnight Technologies concluded a landmark three days at GISEC Global 2026 at Expo City Dubai. The company brought 16 technology vendors together under one integrated Zero Trust strategy, signed strategic MOUs with Harness and Asimily, launched the region's first Women in Cybersecurity series, received an official award from Dr. Mohamed Al Kuwaiti, Head of Cybersecurity for the UAE Government, and celebrated its ecosystem with an exclusive Gala Dinner. The stand at GISEC was among the most distinctive at the event, featuring dedicated zones across five security pillars: * AI driven SOC automation and threat detection (CrowdStrike, Swimlane, NetWitness, Group-IB) * Data protection and quantum readiness (Certes Networks) * Operational cyber resilience (Rezilens, Immersive, CounterCraft) * Identity security and Zero Trust access (Netwrix, Appgate) * Application security, OT, IoT and cyber physical resilience (Harness, Invicti, Xage Security, Forescout, Asimily, SolarWinds). "Our role is not simply to put more cybersecurity products into the market. Security teams already have enough technology to manage. The real challenge is making those technologies work together so customers can move from identifying a risk to governing it, containing it, and recovering from it. That is where our Zero Trust approach helps customers operationalise resilience, not just buy more tools", Wael Jaber, Chief Strategy Officer, CyberKnight Technologies. Two strategic distribution agreements were formalised on the show floor. The first expanded CyberKnight's DevSecOps and application security portfolio through a partnership with Harness, following Harness's acquisition of Traceable. The second, an MOU with Asimily, strengthened the company's cyber asset and exposure management capabilities across IT, IoT, OT, and IoMT environments. CyberKnight entered GISEC with recognition from two key partners. CrowdStrike presented its Aspiring Star Award in acknowledgment of rapid regional growth and expanding Falcon platform adoption, while Group-IB named the company Distributor of the Year 2025 META for outstanding performance across enterprise and government customers. Together the two awards reflect the confidence the vendor community places in CyberKnight's ability to grow markets and build ecosystems across the Middle East and Africa. On the community front, the company launched its Women in Cybersecurity series at GISEC - a long term initiative bringing together senior women leaders from across the vendor ecosystem to advance diversity, mentorship, and leadership in the region's cybersecurity industry. Separately, CyberKnight received an official participation award presented by Dr. Mohamed Al Kuwaiti, Head of Cybersecurity for the UAE Government, accepted by Avinash Advani, Founder and CEO, and Swapna Nair, Director of Marketing. "GISEC 2026 was a defining moment for CyberKnight. The partnerships we announced, the recognition we received, and the community we brought together reflect the trust our ecosystem places in us. We leave more committed than ever to delivering world class cybersecurity capabilities to the Middle East and Africa", Swapna Nair, Director Marketing, CyberKnight Technologies. CyberKnight concluded its participation with an exclusive Gala Dinner bringing together customers, partners, and industry leaders from across the region. Two of its strategic vendors were recognised with top honours, with CrowdStrike receiving the Vendor of the Year award and SolarWinds being named Revenue Growth Champion. Image Credit: CyberKnight
Critical SolarWinds flaws let attackers remotely execute code on observability servers. SolarWinds released Observability Self-Hosted 2026.2.3 to fix two serious vulnerabilities that could let unauthenticated attackers remotely execute code on affected observability servers. The flaws, tracked as CVE-2026-28324 and CVE-2026-28325, affect specific non-default configurations and communication modes. The update was released on September 22, 2026, and is especially important for organizations running SolarWinds Observability Self-Hosted in environments with Web Performance Monitor, or WPM, players. Successful exploitation could let a remote attacker run arbitrary commands on a vulnerable server without logging in first. CVE-2026-28324 is rated 9.8 out of 10 on the CVSS severity scale, making it a critical issue. SolarWinds said the vulnerability stems from insufficient integrity checks in Observability Self-Hosted installations configured in a non-default, non-secure manner. SolarWinds flaws execute code. The advisory does not provide public proof-of-concept details. However, the high severity score indicates that defenders should treat exposed and specially configured servers as high-priority patching targets. The second flaw, CVE-2026-28325, has a CVSS score of 8.8 and is also classified as an unauthenticated remote code execution issue. According to SolarWinds, it stems from deserializing untrusted data when the application uses a specific communication mode. Unsafe deserialization occurs when software accepts attacker-controlled serialized data and processes it without proper validation, potentially allowing malicious objects or commands to run in the application context. Kai Huang of Armadin responsibly reported both vulnerabilities. SolarWinds said the issues are resolved in version 2026.2.3, which adds no new product features but includes security fixes and platform reliability improvements. The release also changes the behavior of certain WPM player deployments. After the upgrade, passive WPM players installed by default on the main polling engine are switched from server-initiated to player-initiated communication. Remote passive WPM players are automatically assigned randomly generated strong passwords during their upgrade. However, SolarWinds noted that players with the Enable Upgrade option disabled are not upgraded automatically and require administrator attention. Active, player-initiated WPM players do not require a password after the upgrade. Administrators should upgrade their entire SolarWinds deployment through Settings > My Deployment, which updates SolarWinds Platform products and related scalability engines. Before applying the update, security teams should identify all main polling engines, remote WPM players, and communication modes in use. They should also verify that passive remote players have strong credentials and that systems excluded from automatic upgrades are updated manually. Organizations should review server exposure, restrict management access to trusted networks, monitor SolarWinds application and Windows logs for unexpected process execution, and investigate abnormal activity involving polling engines or WPM players. Older deployments deserve particular attention: SolarWinds has ended engineering support for Observability Self-Hosted 2024.2 and earlier versions, meaning they no longer receive regular fixes or service releases. Cut every SOC alert investigation by 21 min. Power your SOC with instant IOC context for immediate response: Integrate TI Lookup in your SOC The post critical SolarWinds flaws let attackers remotely execute code on observability servers appeared first on cyber security News. Related cyber security News posts. SolarWinds has released security patches addressing three critical remote code execution vulnerabilities in Serv-U that could allow attackers with administrative privileges to execute arbitrary code on affected systems. The vulnerabilities disclosed in Serv-U version 15.5.3 pose significant risks to organizations that rely on the file transfer software for secure data... In "Cybersecurity News - Original News Source is cybersecuritynews.com" IT and security administrators can utilize SolarWinds Access Rights Manager (ARM) to efficiently manage and audit user access rights to data, systems, and files. The software provides an easy-to-use interface for provisioning, de-provisioning, and overseeing access, which helps safeguard organizations from potential data loss and breaches. Access Rights Manager 2023.2... In "Cybersecurity News - Original News Source is cybersecuritynews.com" CISA Warns SolarWinds Web Help Desk Vulnerability An urgent warning regarding a critical remote code execution (RCE) vulnerability in SolarWinds Web Help Desk. The vulnerability, tracked as CVE-2025-40551, exploits unsafe deserialization of untrusted data and could allow attackers to execute arbitrary commands on affected systems without requiring authentication. CVE-2025-40551 is... In "Cybersecurity News - Original News Source is cybersecuritynews.com"
SolarWinds patches ARM hard-coded key flaw enabling unauthenticated RCE. Byadmblake September 19, 2026 SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability. The vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and... SolarWinds has released security updates to address a high-severity flaw in Access Rights Manager (ARM) that, if successfully exploited, could lead to an unauthenticated remote code execution vulnerability. The vulnerability, tracked as CVE-2026-28326, is rated 8.8 out of 10.0 on the CVSS scoring system. The issue affects all versions of Access Rights Manager 2026.2 and prior. "SolarWinds
Critical ArangoDB bugs expose entire databases and enable remote code execution as root. 2026-09-09 14:09 Two critical ArangoDB vulnerabilities can allow unauthenticated attackers to access protected database APIs and, after obtaining valid database access, escalate to root-level code execution on affected hosts. Security researchers reported the vulnerabilities to ArangoDB on August 23, 2026. Patches shipped on August 31, followed by GitHub Security Advisories published on September 6: GHSA-rrgq-978q-36mq for the [...] Read the original article: PostgreSQL has released critical security updates addressing multiple high-impact vulnerabilities that could allow remote code execution (RCE), SQL injection, and denial-of-service (DoS) attacks across widely deployed database environments. The PostgreSQL Global Development Group announced the release of versions 18.4, 17.10, 16.14, 15.18, and 14.23, fixing 11 security flaws and more... May 19, 2026 SolarWinds has released Serv-U 2026.3, which includes fixes for a cluster of 9.1 CVSS critical vulnerabilities that allow remote code execution (RCE) and privilege escalation up to root on Unix-like systems. This update significantly strengthens the managed file transfer (MFT) and FTP server platform against potential takeovers. While Windows instances... July 22, 2026 Microsoft has addressed three critical security flaws in its Office suite, including two vulnerabilities rated Critical and one Important, all enabling remote code execution (RCE) via use-after-free memory corruption weaknesses. These vulnerabilities, disclosed between March and May 2025, expose systems to attacks where malicious actors could execute arbitrary code by... May 14, 2025