AWS Analytics

Lightspin Launches Free AWS Cloud Security Tool to Reveal Publicly Exposed Cloud Assets on Any Domain

Lightspin | April 06, 2022

Lightspin_Launches_Free
Lightspin, the next-generation cloud security platform, today announced the first free AWS cloud security tool that scans any and all domains to reveal publicly exposed cloud assets.Recon.Cloud is a free AWS cloud threat intelligence resource that provides a clear view of any domain's current exposure from an attacker's perspective. Users will have vastly greater visibility into and increased transparency of their publicly exposed assets.

Attack surface management is a rising challenge of cloud migrations. Gartner predicts that, through 2025, 99% of breaches in cloud environments will come as a result of human error, such as misconfiguration of cloud roles, permissions, and policies. Existing subdomain enumeration tools do not provide the granular specifics for cloud environments. Unlike other tools, Recon.Cloud scans provide a full picture of an AWS environment with all AWS metadata accessible within the user interface. Users can then easily export their results via a JSON file or incorporate their findings into the Lightspin platform to see even more contextual risk within their broader attack surface.

With Recon.Cloud, we are helping to solve the issue of poor visibility in cloud environments. Recon.Cloud is specifically designed to focus on only the pertinent publicly exposed cloud assets in a domain. DevOps and red team members can use Lightspin's free and easy-to-use threat intelligence tool for an in-depth picture of their AWS environment with the option of exporting and analysis just one click away. It also allows security operations to scan targets for research or to better understand recent acquisitions during threat modeling."

Gafnit Amiga, Director of Security Research at Lightspin.


About Lightspin
Lightspin's next-gen cloud security posture management (CSPM) platform protects cloud and Kubernetes environments from build to runtime and simplifies cloud security for security and DevOps teams. Using advanced graph-based technology, Lightspin prioritizes risks across the cloud environment focusing security efforts on the critical issues that matter most. Lightspin serves Fortune 500 customers across the globe and is headquartered in Tel Aviv, Israel with offices in New York, NY.

Spotlight

More and more IT leaders have concluded that only through a truly innovative approach to data center modernization can their organizations fully leverage the benefits of modern applications on premises, in the cloud or both. Read this white paper to learn: What to look for when considering data center modernization How to make t

Spotlight

More and more IT leaders have concluded that only through a truly innovative approach to data center modernization can their organizations fully leverage the benefits of modern applications on premises, in the cloud or both. Read this white paper to learn: What to look for when considering data center modernization How to make t

Related News

Cloud App Development, Cloud Security, Cloud App Management

Leading SaaS Data Protection Provider Keepit Launches Backup and Recovery for Microsoft Azure DevOps

Businesswire | July 04, 2023

Keepit, the market leader in cloud data protection and management, today announced the launch of its new backup and recovery service for Microsoft Azure DevOps. Keepit is the world’s only independent, vendor-neutral cloud dedicated to Software-as-a-Service (SaaS) data protection with a blockchain-verified solution, and the Azure DevOps service adds to the company’s already industry-leading coverage for Microsoft’s cloud services. “Azure DevOps has limited disaster recovery coverage. If a company loses its Azure DevOps data, it loses access to development operations, which means it loses the ability to track, document and deliver what software it’s building. Those losses can have a severe impact on the development team’s productivity and ability to deliver to its customers,” said Paul Robichaux, Keepit’s senior director of Product and a Microsoft Most Valuable Professional (MVP). DevOps is a set of practices that combines software development (Dev) and IT operations (Ops) and is characterized by key principles of shared ownership, rapid and continuous deployment, workflow automation, and rapid feedback. It is a way of thinking, collaborating and driving effectiveness and efficiency in software development, with a goal of delivering software more quickly while maintaining high quality. Azure DevOps (ADO) is Microsoft’s solution for implementing DevOps and supports a culture and set of processes that bring together developers, project managers, and individual contributors. Tools available as part of the Azure DevOps suite include Azure Boards, a standalone service that helps teams plan, track and discuss work across the entire software development process, and Azure Pipelines, which provides build and release services to support continuous integration and delivery of applications. With its simple, fast and flexible Azure DevOps backup and recovery service, Keepit safeguards these workloads against large-scale disasters and provides its customers with the following: The most comprehensive protection and quickest recovery for Azure DevOps Boards and Pipelines data and metadata​ Protection for Azure boards – including work items, boards, backlogs, team sprints, queries, and delivery plans Restoration with full metadata, including comments, custom fields and attachments Rapid restoration of critical continuous integration and continuous development/deployment (CI/CD) automations and Pipelines to a known-good state​ Immutable storage of data in Keepit’s ISO 2700-certified private cloud, providing long-term immutable archive or escrow copy of sensitive ADO data Granular protection that delivers speedy recovery, including for accidental deletions or changes, to minimize disruption to mission-critical activities Compliance with various data protection regulations. Robichaux added, “Keepit’s fine-grained, incremental coverage protects against both ‘Oops’ scenarios and large-scale incidents. Our Azure DevOps backup and recovery service will enable businesses to protect their software development operations as an add-on to the coverage we offer for Microsoft’s cloud services. We are excited to include this in our already robust stable of offerings for our clients.” With its unmatched ease of use, fast restore features that minimize downtime, and cost-effectiveness, Keepit continues to be the solution that organizations rely on to protect their cloud-based data. For more information on Keepit’s backup and recovery for Azure DevOps, visit keepit.com. About Keepit Keepit is a Software-as-a-Service company that provides dedicated data protection for companies with data stored in the cloud. Keepit is the world’s only vendor-neutral and independent cloud dedicated to SaaS data protection. Headquartered in Copenhagen with offices and data centers globally, Keepit is trusted by thousands of companies worldwide to protect and manage their cloud data. For more information, visit www.keepit.com or follow Keepit | LinkedIn.

Read More

Cloud Security, Cloud App Management, Cloud Deployment Models

Armor Acquires Quantum Security, Further Strengthening Its Position in the Cloud Security and IT Risk Market

Newswire | August 07, 2023

Armor, a leading cybersecurity company providing cloud and hybrid cloud security solutions to businesses globally, today announced its acquisition of Quantum Security, a Singapore-based cybersecurity firm that specializes in cloud automation and services. The acquisition is aimed at enhancing Armor's capabilities in cloud security and IT risk, delivering advanced solutions to its customers across US, EMEA, and Asia Pacific. As businesses continue to move to the cloud, accelerate adoption of IoT and with the continuous advancement of AI, the traditional security measures are no longer sufficient to safeguard organizations. Armor, as a cloud-native cybersecurity company, understands the unique challenges of securing hybrid cloud and offers comprehensive and scalable security solutions to protect critical data and applications while ensuring compliance with security standards such as PCI, HIPAA, GDPR and many more. Quantum Security's expertise in cloud automation and services will complement Armor's existing capabilities and help the company deliver more comprehensive solutions to its customers. Chris Drake, Founder and CEO of Armor, said, "We are thrilled to welcome Quantum Security to the Armor family. Their deep expertise in cloud automation and services, coupled with Armor's proven track record of providing secure cloud solutions, will enable us to offer more value to our customers and further strengthen our position in the cloud security market." Luke Fritz, Head of Product and Engineering at Quantum Security, said, "We're excited to join the Armor team and for the opportunity to bring the cloud-native, customer-centric solutions we've built to a broader audience. We're equally excited for the technological opportunities and what we can build together - leveraging both companies' extensive experience developing solutions that simplify security and compliance." The acquisition marks a significant milestone for Armor, as the company continues to expand its capabilities and reach in the cloud security market. Armor's acquisition of Quantum Security expands its global footprint of clients and personnel and underlines its commitment to invest in research and development, as well as strategic acquisitions, to deliver advanced cloud security solutions to its customers. About Armor Armor is a cloud-native cybersecurity company providing cloud security & risk solutions to businesses globally. With over 2,000 businesses secured, Armor's cloud security platform offers comprehensive and scalable security solutions to protect critical data and applications. The company is headquartered in Dallas, Texas, and has offices in the United States, Europe, and now Singapore. For more information, visit www.armor.com.

Read More

Cloud App Development, Cloud Deployment Models, AWS Management

TDengine Launches TDengine Cloud in AWS Marketplace and Joins the AWS Partner Network

Prnewswire | July 19, 2023

TDengine, the popular open-source time-series data platform, announced today that TDengine Cloud is available for purchase in AWS Marketplace, a digital catalog with thousands of software listings from independent software vendors (ISVs) that makes it easy to find, test, buy, and deploy software that runs on Amazon Web Services (AWS). Additionally, the company announced that it has joined the AWS Partner Network (APN), a global community of partners working with AWS to provide programs, expertise, and resources to build, market, and sell customer offerings. TDengine Cloud is a fully managed time-series data processing platform based on TDengine, the open-source time-series database (TSDB) optimized for IoT and Industrial IoT. The developer-friendly, enterprise-ready solution allows customers to focus on solving business needs by freeing them from operations and maintenance and reducing system complexity and operational costs in one integrated platform. Now available in AWS Marketplace, TDengine Cloud will deliver a fully managed cloud service for time-series data to give AWS customers the tools to better manage, process, analyze, and share data easily. "With TDengine Cloud, users can harness the power of AWS infrastructure by seamlessly integrating our high-performance time-series database for simple and efficient data management and sharing," said Jeff Tao, CEO of TDengine. "The solution is designed to reduce the tools needed to start, operate, and manage time-series databases at scale." TDengine has also completed the AWS Foundational Technical Review (FTR), which allows APN members to identify and remediate risks in their products or solutions, providing specific guidelines to adopt a subset of AWS best practices to reduce risks around security, reliability, and operational excellence, as defined by the AWS Well-Architected Framework. Passing the FTR recognizes TDengine as a validated AWS Partner on the Software Path. AWS customers can purchase TDengine Cloud in AWS Marketplace. Learn more about TDengine Cloud at cloud.tdengine.com. About TDengine TDengine™ is the popular, open-source data platform purpose-built for time-series data. With over 20,000 stars on GitHub and hundreds of new installations daily, TDengine is used in over 50 countries worldwide. The company is headquartered in Los Gatos, CA, and has raised $70M in venture capital. Learn more at tdengine.com.

Read More