New Sysdig cloud security software prioritizes risk, cuts remediation time

Unified container and cloud safety agency Sysdig on Wednesday launched its cloud safety posture administration (CSPM) providing, which aggregates safety findings by root trigger and prioritizes remediation primarily based on affect. The brand new providing consists of  ToDo, an actionable guidelines displaying prioritized dangers, and Remediation Guru, which affords guided remediation on the supply. 

“We constantly hear from prospects that the cloud safety instruments they’re acquainted with inundate groups with alerts and findings. Compounding the problem is slicing by way of the noise to know the place to dedicate sources,” mentioned Maya Levine, product supervisor at Sysdig. 

Enterprises typically have a whole lot of cloud accounts and companies unfold throughout a number of cloud environments. They typically automate the deployment of cloud companies utilizing infrastructure as code (IaC). If the IaC template has a configuration error, the identical error can get replicated throughout cloud environments, producing a number of alerts and overwhelming safety groups. 

Compounding the issue, insurance policies and controls typically can’t be utilized throughout environments. This ends in inconsistent insurance policies throughout the group for various components of the software program supply pipeline. The dearth of agnostic controls throughout the know-how stack will increase administration complexity, in accordance with the corporate.

“The info we’ve got round that is qualitative, this can be a ache level that’s repeatedly shared in suggestions periods,” Levine mentioned. “The problem is two-fold. First, of all of the alerts and findings a safety staff offers with, what number of of these are actionable? For instance, does a vulnerability in a picture have a repair but? Second, tips on how to prioritize what to give attention to first?”

ToDo is anticipated to avoid wasting time throughout investigations and Remediation Guru may enable safety and DevOps groups to repair points in seconds with just some clicks, the corporate mentioned in an announcement. 

Cloud safety device goals to scale back investigation time

ToDo aggregates dangers which have the identical root trigger and offers opinionated prioritization that reduces time spent on the investigation. Together with the assist in figuring out the danger it additionally implements fixes by way of Remediation Guru. 

Remediation Guru routinely generates the steered change to IaC templates that may be utilized with a single click on. As a result of Sysdig has a shared coverage mannequin, groups can implement coverage throughout a number of clouds and Kubernetes environments. 

“ToDo guides customers to take the actions that may have the best affect. It does the work of aggregating sources with related issues, prioritizing probably the most impactful actions, and guiding customers to take significant remediations. This creates a streamlined course of for safety groups to view all of the urgent points of their setting grouped logically,” Levine mentioned. 

Remediation Guru is accessible as a tech preview to all present Sysdig Safe prospects. ToDo then again is accessible solely on request. New prospects nonetheless can entry ToDo and Remediation Guru once they buy Sysdig Safe. 

The corporate claims prospects have been receptive to ToDo, which is presently in a managed availability (CA) launch. 

“Sysdig has performed suggestions periods with each buyer that has ToDo enabled. The response has been overwhelmingly constructive. Prospects have said that they count on to make use of it steadily and that they see the worth in all that it affords,” Levine mentioned.