Turn DevOps into DevSecOps without sacrificing automation
As DevOps matured within organizations, the process became efficient and fast, but security ended up falling to the wayside. In this article, Gary Stevens explains why security is infiltrating DevOps and how the growth of DevSecOps creates a noticeable drop in the rate of data and security breaches.
The Cloud Native Security Flash | Aqua Security March 19
A new Gartner report covering Containers and Kubernetes in Production, Aqua 4.0 enhances serverless security, Rancher introducing K3s, Runc Vulnerability still lingering, KubeSec 2019 Call-for-Paper, new Kubernetes API server vulnerability, 451 business brief about Cloud native security and more
Aqua Security Extends Platform Reach
Rani Osnat, vice president of product marketing for Aqua Security, says the platform now provides same level of support for functions running on a serverless computing framework and longer-running containers. The challenge with securing serverless computing frameworks is that no standard has emerged, so vendors such as Aqua Security need to navigate all the nuances […]
Aqua Security Unveils First-Of-Its-Kind Serverless Aqua 4.0 Cloud Security Platform
Aqua enables security teams to manage and enforce security policies across a blend of VM-based containers, Containers-as-a-Service (CaaS) and Function-as-a-Service (FaaS) spanning both multi-cloud and on-premises environments.
Aqua Security Introduces Industry’s First Serverless Function Assurance for Securing Serverless Environments
Aqua’s comprehensive serverless security solution now includes a full chain of controls to discover functions across multiple cloud accounts, scan them for vulnerabilities, detect excessive permissions and configuration issues, and provide function assurance – preventing the execution of untrusted or high-risk functions based on defined policies.
Aqua Security Introduces Industry’s First Serverless Function Assurance for Securing Serverless Environments
“The new technologies supporting cloud native applications require a holistic approach to security and compliance, across the application lifecycle as well as up and down the stack, and this has become more evident in recent months with significant vulnerabilities discovered in Kubernetes and runc for example,” notes Amir Jerbi, CTO and co-founder at Aqua Security. […]
DevOps and Security: The Path to DevSecOps
Aqua Security: This tool is ideal to manage end-to-end DevSecOps pipeline security. It has very tight runtime security processes and controls in place. It offers full control over the containerized environment and prevents any intrusion or vulnerability across the pipeline.
Containing risk
The progress of DevOps continues, but what about the security risk it brings? Dror Davidoff, CEO and co-founder at Aqua Security shares his thoughts on mitigating the new security risks of containers.
- Mitigating the Kubernetes API Server Patch Permission DoS Vulnerability (CVE-2019-1002100) March 7, 2019
- Securing Serverless Functions with Aqua March 4, 2019
- Istio: Canary Deployments, Dynamic Routing & Tracing February 21, 2019
- Mitigating High Severity RunC Vulnerability (CVE-2019-5736) February 12, 2019
- Amazon Firecracker: Isolating Serverless Containers and Functions January 24, 2019
- Impressions from KubeSec, The First Enterprise Kubernetes Security Summit December 12, 2018
- TODAY! @lizrice will be delivering #KubernetesDay India's keynote in Bengaluru! Hosted by @linuxfoundation, this event brings together experts to engage in #Kubernetes & related #cloudnative technologies. Schedule: https://hubs.ly/H0h5T-T0 @CloudNativeFdnpic.twitter.com/2fyGmndeHS March 23, 2019
- KUBERNETES EXPERTS! Do you have experience in successfully implementing Kubernetes and adjacent technologies in your organization? Join team of experts for KubeSec Enterprise Summit 2019 in Barcelona: https://hubs.ly/H0h4NP70 #KubeSec2019 #KubeCon #Kubernetespic.twitter.com/Q7cwniN6xJ March 22, 2019
- The CIS #Kubernetes benchmark is quite a long guideline/checklist - luckily the @AquaSecTeam folks have open sourced kube-bench, so that we can automate compliance, and use it in the PKE release process (kube-hunter is the icing on the cake) https://banzaicloud.com/blog/pke-cis-k8s-benchmark/ … @lizricehttps://twitter.com/BanzaiCloud/status/1108721492542541824 … March 21, 2019