Study by Cavirin finds organizations are concerned with visibility and the ability to manage risk and security with hybrid cloud accounts and workloads.
Santa Clara, CA (April 10, 2018) – Cavirin Systems, Inc., the only company providing cybersecurity risk posture and compliance for the enterprise hybrid cloud today announced the availability of Cavirin Hybrid Cloud CyberPosture Intelligence. CyberPosture intelligence is the ability to deliver risk, cybersecurity and compliance management by providing visibility and actionable intelligence to the CISO and other stakeholders across hybrid environments. The Cavirin platform delivers this through real-time visibility, predictive analytics, and intelligent remediation through DevSecOps integrations.
In a new study of 250 hybrid cloud security leaders, “Cyber Security Posture: The Challenges and Strategies of Hybrid Cloud”, the two top concerns identified were verification that public cloud accounts are secure (69 percent) and confirmation that workloads in the cloud are secure as well (69 percent). This lends credence to the reality that both account and workload security are critical.
However, security is still a key issue and barrier to adopting a hybrid cloud architecture, with specific concerns including increased complexity (55 percent), a lack of visibility into cloud endpoints (32 percent), difficulty instituting security controls (37 percent) and a clear need for more assessment tools (29 percent).
Some additional noteworthy survey findings include:
- 62 percent use separate tools to secure their on-premise and cloud environments, and less than half of respondents currently use a security solution spanning on-premise and cloud. A concerning finding was that 40 percent of respondents only use the tools provided by the cloud provider, which are considered by most to be incomplete.
- 50 percent have deployed on Azure as part of a hybrid cloud strategy, demonstrating the strong momentum it’s experiencing as an equal to AWS in services offered, as well as traction within Microsoft’s account base.
- When asked about the security technology they currently use, the survey found strong uptake of Cloud Workload Protection Platforms (48 percent), Cloud Access Security Brokers (37 percent) and Security Information and Event Management (39 percent).
- 39 percent of respondents cited that DevOps and development teams care greatly about their cybersecurity posture, showing that the silo between security/IT and development teams is diminishing.
“Though our research shows that over 81 percent of enterprises are adopting a hybrid cloud approach, only 30 percent are using unified security tools that span on-premise and the cloud,” stated Doug Cahill, ESG’s lead cybersecurity and cloud analyst, quoting related research by ESG on hybrid cloud security. “The fact that this will grow to 70 percent over the next two years speaks well of Cavirin’s hybrid cloud approach, helping address a key barrier to hybrid cloud adoption – security and visibility.”
Traditional solutions provide siloed, delayed visibility, and require manual security remediation and testing which is not well suited for the flexibility and velocity that the hybrid cloud model offers. Cavirin’s CyberPosture Intelligence for the Hybrid Cloud eliminates these limitations and removes the barrier to the cloud with:
- Continuous Risk & Cybersecurity Posture Management: A central ‘CISO Dashboard’ depicts exactly what organizations have at each moment and where they are located. This includes cloud account security posture, as well as virtual machines and container instances.
- Integrating Security into DevOps: Bridges the gap between DevOps and SecOps by automatically injecting security into the DevOps cycle – development, staging, and deployment – through CI/CD integration.
- Continuous Compliance Management: Removes security compliance as a barrier to cloud adoption through automation and customization via the broadest set of customizable frameworks, benchmarks and guidelines.
“We are deploying the Cavirin platform to help ensure compliance with government regulations, given our organization’s focus,” said Ernesto Ruy Sanchez. DevOps Manager, Human Longevity, Inc. “In addition, Cavirin’s open architecture and container support permit us to easily integrate its capabilities with our DevOps environment.”
“Cavirin’s ability for real-time visibility across the infrastructure permits organizations to accurately assess risk, security posture, then automatically remediate, said Jack Kudale, COO, Cavirin. “This is the first platform available for organizations to easily migrate and achieve continuous security and compliance of their hybrid cloud deployments, knowing they are safe and secure.”
New Technical Capabilities include:
- “Golden Posture” and ‘Top 25’ recommendations for guided remediation.
- Container runtime monitoring delivering on Cavirin’s ‘full-stack’ container security that already includes image scanning, CIS container and Kubernetes hardening, and guest OS hardening.
- Custom policy creation and compensating controls based on a Cavirin Domain Specific Language
- Availability of the new, Cavirin-authored CIS Azure Foundation Benchmark.
The full Cavirin survey results are available here.
Cavirin is offering demonstrations of its hybrid cloud security capabilities as well as a preview of its new user experience at RSA 2018, April 16-20, Booth # 4439.
For further information about the Cavirin Platform, please visit our website.
About Cavirin
Cavirin delivers cyberposture intelligence for the hybrid cloud by providing real-time risk & cybersecurity posture management, continuous compliance, and by integrating security into DevOps. The Cavirin platform combines automated discovery, infrastructure risk scoring, predictive analytics, and intelligent remediation to help organizations of all sizes leverage the cost savings and agility of the cloud without increasing operational risk or reducing their security posture. For more information, visit www.cavirin.com or follow us at www.twitter.com/cavirin.
