Cloud Security

Orca Security Simplifies Cloud Asset Discovery with AI Technology

Orca Security Simplifies Cloud Asset Discovery with AI Technology

Orca Security, a leader in agentless cloud security, has unveiled a groundbreaking AI-driven cloud asset search feature within its Orca Cloud Security Platform. This innovation positions Orca as the first provider to offer an AI-powered cloud asset search that's as simple as asking a question. This development empowers not only security professionals but also developers, DevOps teams, cloud architects, and risk governance and compliance teams to swiftly and effortlessly gain insights into their cloud environments.

Building upon its existing integrations with ChatGPT and Microsoft Azure OpenAI GPT-4 for generating remediation instructions, Orca's new AI-driven search functionality revolutionizes accessibility by enabling users to pose natural language queries like, ‘Do I have any Log4j vulnerabilities exposed to the public?’ or ‘Are there any unencrypted databases with sensitive data accessible on the internet?’ This democratizes cloud security, making it accessible to individuals across the organization, regardless of their expertise, to rapidly respond to zero-day risks, optimize cloud assets, and assess exposure to threats.

Gil Geron, CEO and co-founder of Orca Security, emphasized the platform's user friendliness, stating,

With our latest AI-powered cloud asset search, we are delivering on our promise to provide cloud security that is easy to operate. We built the industry’s first agentless cloud security platform to eliminate lengthy and labor-intensive deployments. Now we are focused on democratizing cloud security by introducing solutions that do not require reading through lengthy documentation or extensive training to operationalize, allowing security teams, developers, and DevOps teams to get value from day one.

[Source: Business wire]

Cloud asset discovery is a critical process involving the identification, categorization, and mapping of all digital assets within a cloud environment. This includes virtual machines, databases, storage instances, containers, networking components, and applications. Yet many organizations lack access to this vital information.

Orca's patented SideScanning technology offers 100% visibility for asset discovery and is now presenting this data intuitively to various teams across organizations, enabling a comprehensive understanding of their cloud environments. This capability is particularly crucial during zero-day threats, where speed is essential, facilitating faster and more effective mitigations.

Orca's solution also eliminates the need for users to understand different naming conventions for each cloud provider. Instead, users can ask general questions, and Orca will automatically search for the relevant status names for each provider, streamlining the search process and ensuring accurate results.

The AI-powered cloud asset search feature is immediately available through a feature request in the Orca Cloud Security Platform.

About Orca Security

Orca Security is a leading provider of cloud security solutions that offer full-stack visibility of the complete cloud infrastructure. It provides deep insights into vulnerabilities, malware, misconfigurations, and more across various platforms, including AWS, Azure, Google Cloud, Alibaba Cloud, and Kubernetes. The platform is designed to provide complete visibility of the entire cloud estate, from development to production, without requiring an agent. The company is known for innovative SideScanning technology that delivers instant-on, workload-level security.

Spotlight

Other News
Cloud Security

Lookout Increases Strategic Investment in Data-centric Cloud Security

Business Wire | October 27, 2023

Lookout, Inc., the data-centric cloud security company, today announced enhancements to its Lookout Cloud Security Platform that are designed to help organizations better discover, assess and protect their data as it moves across any network, from the endpoint to the cloud. These enhancements provide organizations with a unified solution that will expertly secure their data by maximizing visibility and protecting access across all applications. The Lookout Cloud Security Platform, the Company’s Security Service Edge (SSE) offering, continuously monitors the risk posture of users and their devices to provide dynamic and granular zero-trust access based on the sensitivity level of apps and data, enabling organizations to protect their workers, devices, applications and data from unauthorized access and modern-day internet-based threats. Services in the platform include: Secure Private Access (ZTNA), Secure Internet Access (SWG) and Secure Cloud Access (CASB). Lookout’s data-centric cloud security innovation helps safeguard customers’ sensitive information as it moves across networks, clouds, applications and devices: Discover and onboard all private apps with enterprise app discovery:When it comes to protecting sensitive corporate data, ZTNA offers a far more secure approach compared to traditional VPNs.Unlike VPNs that provide access to the entire network for example, ZTNA offers granular access control, which limits users to specific applications. This reduces the overall attack surface and prevents lateral movement of threats, minimizing the risk of compromised accounts or devices compromising the entire infrastructure.Lookout Secure Private Accessdiscovers and helps onboard private applications running on an organization’s network hosted on-prem or in the cloud, and currently being accessed by a VPN. Using this functionality, IT can now see all private applications being accessed by their users and take steps to seamlessly define and enforce access and data protection policies for these apps. Extend zero trust protection with firewall as a service:The Lookout Cloud Security Platform has an integrated cloud firewall that extends inspection of incoming and outgoing traffic across all ports and protocols, enabling granular visibility and access control into non-web traffic to stop zero-day threats. With this enhancement, customers can apply more granular security and access policies across all of their apps (web, TCP, UDP, ICMP) and both internet and intranet traffic. Expand data classification and protection capabilities in Google Drive:Google Labels Classification expands data classification capabilities across the Lookout Cloud Security Platform through an integration with Google Drive labels. This integration helps Lookout customers classify sensitive data with Google Drive labels and enforce security policies based on these labels to protect sensitive data stored in Google Drive’s API mode. Secure traffic and enforce policies on guest networks and IoT devices:Organizations need visibility and control over all endpoints and users within their network in order to reduce the risk of malware infections and data exfiltration through these channels. Lookout has enhanced traffic inspection capabilities, expanding data and threat protection to guest users of company networks and traffic coming from IoT devices. This helps ensure company networks are not compromised from these access points, thereby preventing data exfiltration. Advanced threat protection from phishing and zero-day threats:Lookout has enhanced its integration with remote browser isolation (RBI) and cloud sandboxing to improve the user experience and provide robust threat protection for organizations, preventing users from accessing malicious sites and content. “In today’s digital world, data is the lifeblood of every organization,” said Pete Finalle, Research Manager, IDC. “It is vitally important that organizations protect their data and ensure that it is secure, no matter where it resides or how it is accessed. Lookout's new cloud security features offer greater assurance to IT organizations that their data is safe and their users are protected.” Lookout continues to innovate the Lookout Cloud Security Platform in ways that strengthen the protection of users and data from security threats and enhance the end-user experience, said Aaron Cockerill, Executive Vice President of Product, Lookout. We are the only vendor that unifies cloud and endpoint security into one platform. With this latest release, Lookout continues to build upon our strategic vision to put data security at the intersection of today’s workplace and modern cybersecurity threats. About Lookout Lookout, Inc. is the data-centric cloud security company that delivers zero trust security by reducing risk and protecting data wherever it goes, without boundaries or limits. Our unified, cloud-native platform safeguards corporate data across devices, apps, networks and clouds and is as adaptive and simple as the modern digital world. Lookout is trusted by enterprises and government agencies of all sizes to protect the sensitive data they care about most, enabling them to work and connect freely and safely. To learn more about the Lookout Cloud Security Platform, visit www.lookout.com and follow Lookout on our blog, LinkedIn and Twitter.

Read More

Cloud Storage

DigitalOcean Introduces Cloud-Hosted Scalable Storage for Managed Databases

Business Wire | October 06, 2023

DigitalOcean Holdings, Inc. (NYSE:DOCN), the cloud for startups and SMBs, today announced the launch of Scalable Storage for DigitalOcean PostgreSQL and MySQL Managed Databases, which enables small and medium-sized businesses to only pay for the data resources they need, preventing cloud underutilization and optimizing customer spend. With this new offering, DigitalOcean customers can increase the disk storage of their Managed Databases without needing to change compute and memory to meet higher data utilization demands. As businesses continue to grow and face ever-increasing customer demands, they need a database solution that can seamlessly scale alongside them, said Megan Wood, Chief Strategy & Product Officer at DigitalOcean. DigitalOcean’s portfolio is tailored to meet the needs of startups and tech entrepreneurs, enabling them with flexible and cost-effective solutions like Scalable Storage. With this new offering, businesses can easily accommodate dynamic database storage requirements and expand their data footprint with confidence, making it easier to grow in the cloud. Almost all businesses require a database that can scale to meet their needs, whether it’s an AI company storing voice recordings to train their large language model or an e-commerce website keeping inventory data up to date. For startups and SMBs with limited resources, the ability to have flexible and affordable storage options is also critical. Scalable Storage gives users the flexibility to add storage to MySQL and PostgreSQL Managed Databases at cost-effective prices with minimal friction and downtime. With a variety of shared and dedicated configuration plans, DigitalOcean customers can benefit from more customizable options that better fit their businesses. Add disk storage without adding compute and memory: Through this offering, users can add disk storage in 10 GB increments each priced at $2/month to meet constantly shifting demand without needing to increase compute and memory. Customers at different user levels can make changes to their disk storage capacity through various ways of interactions, including the Cloud Console or via API, allowing for a simpler and more intuitive experience. Greater disk storage capacity: All Managed Database plans come with a range of disk storage options beginning with a minimum amount that customers can increase from two to five times the starting amount. With storage capacity now up to 15 TB, users can future-proof their databases by helping to ensure they can handle the largest of database production workloads. Monitoring to optimize costs: Customers can scale compute, memory, and storage when it matters most by monitoring utilization data and setting alerts. By only paying for the database compute and storage resources needed, businesses can continue to optimize costs while maintaining peak performance. Alongside DigitalOcean Scalable Storage, DigitalOcean has been making investments in its product and infrastructure offerings to provide peace of mind, increased productivity, and more affordable solutions for SMBs and startups. About DigitalOcean DigitalOcean simplifies cloud computing so builders and businesses can spend more time creating software that changes the world. With its mission-critical infrastructure and fully managed offerings, DigitalOcean helps developers at startups and small and medium-sized businesses (SMBs) rapidly build, deploy and scale, whether creating a digital presence or building digital products. DigitalOcean combines the power of simplicity, security, community and customer support so customers can spend less time managing their infrastructure and more time building innovative applications that drive business growth. For more information, visit digitalocean.com.

Read More

Cloud Infrastructure Management

Britain's TSB Bank Selects Lacework for Enhanced Cloud Protection

Lacework | September 25, 2023

Lacework, the data-driven cloud security firm, has been selected by TSB Bank, a prominent British banking institution, to safeguard its cloud infrastructure. TSB Bank's decision to choose Lacework as its cloud security provider demonstrates its commitment to protecting sensitive data and ensuring the highest level of security for its customers. With Lacework's expertise in data-driven security solutions, TSB Bank can confidently rely on their cloud infrastructure being safeguarded against potential threats and vulnerabilities. TSB's Chief Information Security Officer, Paul Branley, expressed his excitement about the development, stating that the Lacework Polygraph data platform would transform the way their security teams operate. He mentioned that it would enable their developers to concentrate on value-added tasks while also substantially reducing security alerts. TSB, a longstanding player in the banking sector with over two centuries of heritage, is serving over five million customers through various channels, including digital, phone, and branches across the UK. With a growing digital business, TSB needed a unified cloud security platform to support its multi-cloud landscape. Lacework will facilitate secure and innovative cloud scaling, eliminating vulnerabilities across various cloud configurations and applications. Andreas Schneider, Field-CISO at Lacework, reportedly mentioned, Partnering with Lacework, TSB will be able to reduce complexity in their tool landscape, and our anomaly detection will allow them to embed security at any speed and scale." [Source – Cision PR Newswire] Lacework's platform will enable TSB to automate audit and compliance processes while seamlessly integrating into DevOps and CI/CD pipelines, ensuring security acts as an enabler of innovation velocity. The adoption of Lacework’s technology by TSB Bank may entail integration challenges, risks related to automation, and uncertainties about real-world effectiveness that could affect TSB's security strategy. TSB Bank's selection of Lacework promises improved cloud security, enhanced developer focus, and support for its multi-cloud landscape, with automation and integration into DevOps pipelines to boost innovation. About Lacework Lacework, a leading cloud security company, offers innovative and scalable solutions for robust cloud security. Their flagship product, the Polygraph Data Platform, automates security processes, providing comprehensive risk insights for security and development teams. Lacework's unique ability to analyze data across AWS, Azure, GCP, and Kubernetes environments is a significant advantage for businesses worldwide. Founded in 2015 and headquartered in Mountain View, California, Lacework excels in breach detection, audit and compliance, and container security.

Read More

Cloud Deployment Models

LightEdge Offers Secure, Scalable LightEdge Cloud with 100% Uptime

LightEdge | October 12, 2023

LightEdge, a prominent cloud and colocation provider, introduces its robust cloud offering, LightEdge Cloud. This cloud solution blends the flexibility of public clouds with private cloud-grade security, incorporating robust connectivity options and compliance expertise for heavily regulated industries. It comes with a 100% uptime guarantee and round-the-clock performance monitoring by a dedicated team of cloud engineers. LightEdge Cloud offers a secure and customizable enterprise cloud experience, emphasizing co-management and transparency. Jim Masterson, the CEO of LightEdge, emphasized that the LightEdge Cloud provides support for any enterprise workload with a scalable, transparent, and, most importantly, highly secure solution. Key features of LightEdge Cloud: Managed by experienced data center and cloud engineers for proactive performance maintenance. Transparent pricing with no hidden costs, including data egress fees and per-IP charges. Compatibility with various enterprise workloads, such as VMware-based, IBM-based, and container-based workloads Integration with VMware Cloud Director for enhanced transparency and management Enhanced security features include microsegmentation, a virtual firewall, DDoS protection, and load balancing. Supported by LightEdge's secure, redundant network developed over 25 years. Dale Dawson, the VP of Product at LightEdge, emphasized that the LightEdge Cloud offers identical advantages to any public cloud but at a more cost-effective and transparent price point, with a complete team of cloud experts prepared to intervene when necessary. LightEdge Cloud provides a secure platform for enterprise workloads, supported by cloud infrastructure and management solutions from VMware and Dell Technologies. Co-management may limit independence, and competition with established cloud providers may pose challenges. Performance and scalability should be evaluated against larger platforms. LightEdge Cloud offers robust security, 100% uptime, transparent pricing, and compatibility with various enterprise workloads, making it attractive for regulated industries. Proactive maintenance, integration with VMware Cloud Director, and a secure network boost reliability. About LightEdge LightEdge, founded in 1996, is a trusted provider of secure cloud and colocation services, with a strong emphasis on security, observability, and compliance. Serving over 1,300 clients, the company offers tailored public cloud solutions and simplifies multi-cloud environments. With a focus on reducing complexity and enhancing security, LightEdge allows clients to allocate resources to innovation over maintenance.

Read More