High 20 cloud native utility safety platforms of 2023


Head over to our on-demand library to view periods from VB Remodel 2023. Register Right here


Exploiting gaps in cloud infrastructure which can be leaving endpoints, identities and microservices uncovered is a fast approach for an attacker to steal credentials and infect an enterprise’s DevOps course of. Assaults to use such gaps are skyrocketing. 

The current 2023 Thales Cloud Safety Research offers laborious numbers: 39% of enterprises have been hit with an information breach beginning of their cloud infrastructure this 12 months alone. A complete of 75% of enterprises say that greater than 40% of the information they retailer within the cloud is delicate. Lower than half of that knowledge is encrypted. 

CrowdStrike’s 2023 World Menace Report explains why cloud-first assaults are rising: Attackers are shifting away from deactivating antivirus, firewall applied sciences and log-tampering efforts and towards modifying core authentication processes, together with shortly gaining credentials and identity-based privileges. 

The attackers’ aim is to steal as many identities and privileged entry credentials as potential to allow them to turn out to be entry brokers — promoting stolen identification data in bulk at excessive costs on the darkish net. Entry brokers and the brokerages they’re creating typically flip into profitable, fast-growing unlawful companies. CrowdStrike’s report discovered greater than 2,500 commercials for entry brokers providing stolen credentials and identities on the market. 

Occasion

VB Remodel 2023 On-Demand

Did you miss a session from VB Remodel 2023? Register to entry the on-demand library for all of our featured periods.

 


Register Now

What’s driving CNAPP adoption  

Consolidating tech stacks continues to dominate CISOs’ plans, pushed by the necessity to enhance efficacy, handle a extra various multicloud safety posture, shut gaps between cloud apps and shift safety left in DevOps pipelines. All these components are contributing to the rising adoption of cloud-native utility safety platforms (CNAPP)

“CNAPPs are fashioned from the convergence of cloud safety posture administration (CSPM) and cloud workload safety platform (CWPP) capabilities in addition to different safety tooling like entitlement administration, API controls and Kubernetes posture management,” reads Gartner’s 2023 Planning Information for Safety

CNAPP structure contributes properly to consolidating cloud configuration, safety and posture administration. Supply: Palo Alto Networks Weblog, March 28, 2023

Main CNAPP distributors are competing in numerous areas, crucial of which embody the efficacy of their cloud infrastructure entitlement administration (CIEM), Kubernetes safety, API controls and cloud detection and response (CDR), in keeping with CISOs VentureBeat spoke with. Demand for CNAPP is best in bigger enterprises from extremely regulated industries that depend on in depth multicloud configurations. Finance, authorities and healthcare suppliers are among the many most dominant industries.  

CISOs inform VentureBeat that one of the sensible advantages of CNAPPs is the chance to consolidate legacy instruments with restricted visibility throughout all menace surfaces and endpoints. The takeaway? Decreasing software sprawl is a fast win. 

Benchmarking the highest 20 CNAPP platforms for 2023 

Full-platform CNAPP distributors present built-in cloud-native safety platforms starting from DevOps to manufacturing environments. Listed here are the highest 20 platforms of 2023: 

Aqua Safety: Extremely regarded for its method of scanning container registries and pictures, CSPM and runtime safety for container and cloud-native safety. Additionally has full life cycle safety and superior runtime strategies, together with help for the prolonged Berkeley Packet Filter (eBPF).

Verify Level: Gives a broad set of capabilities by way of its CloudGuard platform, together with CSPM, CIEM and superior runtime safety. Identified for securing cloud workloads throughout environments with identity-centric entry controls, in addition to menace intelligence integration to supply real-time contextual prioritization of dangers.  

Cisco: Just lately acquired Lightspin for its Kubernetes safety capabilities and CSPM. Its Tetration platform focuses on runtime safety, leveraging eBPF and third-party insights for superior container monitoring and granular controls. Cisco emphasizes behavioral analytics to detect anomalies and threats in container environments and offers sturdy controls to restrict lateral motion between workloads.

CrowdStrike: Affords a number one CNAPP suite emphasizing identity-centric visibility, least-privilege enforcement and steady monitoring. Its runtime safety leverages brokers and eBPF for workload safety. CrowdStrike’s key design targets included implementing least-privileged entry to clouds and offering steady detection and remediation of identification threats. 

Cybereason: Platform focuses closely on malicious habits detection. A core power is its potential to detect threats utilizing behavior-based strategies. The corporate can also be identified for API integrations, AI and machine studying (ML) experience. Cybereason makes a speciality of detecting compromised accounts and insider threats through detailed person exercise monitoring. 

Juniper Networks: Collects in depth knowledge on system posture and visitors patterns to supply networking context for safety insights. Additionally permits segmentation controls between Juniper units.

Lacework: Targeted on workload habits evaluation for containers and runtime strategies corresponding to eBPF to realize a complete perception into container exercise and efficiency. Its emphasis on detecting anomalies utilizing superior ML algorithms which can be custom-tuned for containerized environments is a key differentiator.

Microsoft: Integrates safety throughout Azure companies with zero-trust controls, enforces least-privileged entry and offers workload protections corresponding to antivirus and firewalls. Makes use of Microsoft Graph to correlate safety analytics and occasions throughout Azure.

Orca Safety: Performs steady authorization checks on identities and entitlements throughout cloud environments. A key differentiator is the power to generate detailed interactive maps that visualize relationships between cloud belongings, customers, roles and permissions. 

Palo Alto Networks Prisma Cloud: Gives a broad suite of capabilities, together with identity-based microsegmentation and sturdy runtime safety with eBPF. Prisma Cloud is an trade chief identified for superior protections corresponding to deception method and consists of in depth compliance automation and DevSecOps integrations. 

Qualys: Focuses on compliance and vulnerability administration by way of steady scanning and least-privilege controls. Identifies vulnerabilities all through the life cycle and permits automated patching and remediation workflows. One other key differentiator is compliance mapping and reporting.

Rapid7: Enforces least privilege entry and permits automated response and remediation triggered by occasions. Affords pre configured insurance policies and streamlined workflows designed for small safety groups. An intuitive person interface and fast implementation goal to simplify deployment and usefulness for organizations with restricted safety sources.

Sonrai Safety: Focuses on entitlement administration and identity-based safety utilizing graph database expertise to find and map person identities throughout cloud environments. Person identification, geolocation and different contextual components can outline {custom} entry controls.

Sophos: Focuses on knowledge safety, compliance and menace monitoring capabilities and gives superior knowledge loss prevention corresponding to file fingerprinting and optical character recognition. Cloud environments even have anti-ransomware protections. 

Sysdig: Centered on runtime safety and superior behavioral monitoring. For container-level visibility and anomaly detection, the platform makes use of embedded brokers. Sysdig Safe Advisor consists of an built-in safety assistant to assist SecOps and IT groups create insurance policies sooner.

Tenable: Targeted on compliance, entitlement administration and identification governance. Affords complete compliance automation mapped to PCI, HIPAA and ISO laws. Additionally offers differentiated identification and compliance administration by way of superior capabilities to implement least privilege and certify entry.

Pattern Micro: Consists of runtime safety, compliance and menace monitoring, enforces insurance policies and protects cloud environments from file- and email-based threats. Customized sandboxing for suspicious file evaluation can also be included.

Uptycs: Differentiates itself by combining CNAPP capabilities with prolonged detection and response (EDR) capabilities. Employs knowledge lake strategies to retailer and correlate safety telemetry throughout cloud and container workloads. Threats are recognized utilizing behavioral analytics, and automatic response workflows permit for fast remediation. 

Wiz: Centered on steady entry controls, micro segmentation and identity-based adaptive safety. Routinely discovers and visualizes relationships between cloud belongings, customers and permissions. Wiz additionally conducts danger evaluation to determine potential assault paths and stands out with its specialised visualization, identification administration and micro-segmentation.

Zscaler: Posture Management prioritizes dangers brought on by misconfigurations, threats and vulnerabilities. Fully agentless and correlates knowledge from a number of safety engines.

Why CNAPP will succeed as a consolidation catalyst 

CNAPPs are gaining recognition as CISOs look to consolidate and strengthen their safety expertise stacks. Platforms can present built-in safety throughout the event lifecycle and cloud environments by combining capabilities together with cloud workload safety, container safety and CIEM.

CNAPP adoption will proceed accelerating in extremely regulated industries together with finance, authorities and healthcare. CISOs in these industries are underneath strain to consolidate tech stacks, enhance compliance and safe advanced cloud infrastructure concurrently. As a result of they supply a unified platform that meets a number of safety and compliance necessities, CNAPPs are proving to be an efficient consolidation catalyst.

VentureBeat’s mission is to be a digital city sq. for technical decision-makers to realize data about transformative enterprise expertise and transact. Uncover our Briefings.

Related Articles

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Latest Articles