[ad_1]
Portland, OR – February 10, 2022 – Orca Safety, the cloud safety innovation chief, in the present day introduced new product capabilities that additional simplify cloud safety and compliance operations. For the primary time, safety groups can handle their cloud safety configuration, defend workloads, handle infrastructure entitlements, obtain broad regulatory compliance, and benchmark their cloud safety from a single agentless multi-cloud platform. Orca Safety’s context-aware engine unifies the intelligence collected from deep contained in the workload with cloud configuration and infrastructure entitlement particulars to right away floor dangers and their root trigger. Additional updates to Orca Safety embrace assist for over forty compliance frameworks and Orca Safety Rating – the first-ever benchmark to assist organizations evaluate their multi-cloud safety posture to business friends and throughout their very own enterprise items.
“Identification is a key element in cloud safety,” mentioned Avi Shua, co-founder and CEO of Orca Safety. “In contrast to different cloud safety options that take a siloed method to id danger, Orca Safety offers practitioners an entire view of their safety posture along with contextualized dangers, equivalent to vulnerabilities, misconfigurations, malware infections, and delicate information. Orca Safety additionally goes past native cloud identities, to additionally take into account unmanaged identities which might be provisioned as SSH keys and passwords residing on the workloads themselves. This permits our clients to have the complete protection they should innovate securely within the cloud.”
In accordance with Gartner®, “by 2024, organizations operating cloud infrastructure providers will endure a minimal of two,300 violations of least privilege insurance policies, per account, yearly.” This report additionally states that, ‘the overwhelming majority of granted entitlements in IaaS are pointless. Greater than 95% of accounts in IaaS use, on common, lower than 3% of the entitlements they’re granted, which enormously will increase the assault floor for account compromises.”*
Orca Safety CIEM capabilities go properly past id hygiene
Cloud infrastructure entitlements administration (CIEM) is an important functionality inside fashionable cloud safety platforms. Orca Safety screens all identities, roles, teams, permissions, and insurance policies deployed in a public cloud setting, and alerts groups when there are violations in id administration greatest practices, such because the precept of least privilege entry. In contrast to conventional CIEM options, that are restricted to cloud-managed identities, Orca Safety maps unmanaged identities, equivalent to non-public SSH keys, cloud supplier keys saved in recordsdata, setting variables containing secrets and techniques, and improperly saved passwords that may very well be used for lateral motion. By combining CIEM, CSPM, and CWPP capabilities right into a single CNAPP platform and information mannequin, Orca Safety can flag assault chains containing dangerous mixtures. For instance, an contaminated workload that may assume a excessive privileged occasion function permitting entry to a database with PIIis prioritized for fast remediation.
Business’s first multi-cloud safety rating
Orca Safety Rating helps safety and compliance groups reveal the state of their safety controls and progress to auditors, prime administration, the board, buyers, and cyber insurance coverage firms. Organizations can nowbenchmark their cloud safety towards business friends or throughout enterprise items, in addition to measure their progress over time.The Orca Safety rating is predicated on elements equivalent to suspicious exercise, lateral motion danger, information in danger, weak property, and time-to-remediate essential safety points.
Constructed-in compliance for over forty frameworks and benchmarks
Along with HIPAA, GDPR, PCI-DSS, SOC 2, NIST, CCPA, FedRamp, ISO, CIS Docker, and others, Orca Safety now helps CIS Kubernetes Benchmarks, and the New Zealand Info Safety Guide Framework (NZISM).
Extra Assets:
*Gartner, “Innovation Perception for Cloud Infrastructure Entitlement Administration”, Henrique Teixeira, Michael Kelley, Abhyuday Information, June 15, 2021.
GARTNER is a registered trademark and repair mark of Gartner, Inc. and/or its associates within the U.S. and internationally and is used herein with permission. All rights reserved.
Be aware: The entire talked about options will probably be obtainable in Q1, 2022.
About Orca Safety
Orca Safetyoffers instant-on safety and compliance forAWS,Azure, andGCP－with out the gaps in protection, alert fatigue, and operational prices of brokers or sidecars. Simplify cloud safety operations with a singleCNAPPplatform forworkload and information safety,cloud safety posture administration, vulnerability administration, and compliance. Orca Safety prioritizes danger based mostly on the severity of the safety challenge, its accessibility, and enterprise impression. This helps you deal with the essential alerts that matter most. Orca Safety is trusted by international innovators, together with Databricks, Autodesk, NCR, Gannett, and Robinhood. Join your first account in minutes:https://orca.safetyor take thefree cloud danger evaluation.
[ad_2]
