DEVOPSdigest

Lacework will introduce Active Host Vulnerability Monitoring, pre-flight checks, and CI/CD automation workflows to its comprehensive SaaS security offering.

Customers scaling services in the cloud will now have the telemetry to know what to fix in just three clicks without having to reference multiple tools as they safely build and innovate at speed.

Lacework was built from the ground up for detecting and observing security threats in the cloud, including serverless, containers, and Kubernetes workloads, and streamlines security tasks for software teams building on Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). The company has seen a surge of demand for seamless DevSecOps workflow tooling and a unified, well-integrated cloud security solution.

The addition of host vulnerability monitoring addresses the security challenges of protecting modern, ephemeral container and host architectures and workflows. It consolidates multiple tools and significantly eases the process of fixing vulnerabilities before they go into production with preflight host vulnerability scans, active vulnerability identification, and enhanced CI/CD tooling for DevOps workflows. Lacework’s intrusion detection agent helps DevOps stay focused on innovation by alerting teams to only those vulnerabilities that carry a viable potential risk.

“Incumbent security offerings focus on vulnerabilities, but they do not capture or decipher the breadth of data—at scale—required to know whether you are truly vulnerable or not,” said Dan Hubbard, CEO of Lacework. ”Efficacy is crucial because not all vulnerabilities render you vulnerable. For example, one of our customers believed they had 51,000 vulnerable hosts but were able to narrow that down to 78 active machine images with Lacework. The power of our SaaS cloud security platform is that we can add new capabilities quickly so that our customers can build and secure clouds more effectively.”

By providing telemetry of what is actually active and vulnerable at the package level, Lacework helps customers focus their remediation effort on something that is actionable and manageable. Additional benefits of Lacework’s Active Host Vulnerability Monitoring update include:

- Ephemeral Hosts at scale: Telemetry to distill and focus on vulnerabilities in ephemeral and immutable infrastructure.

- Pre-Flight Check API: Scan a host image (e.g., AWS AMI) for known vulnerabilities before deploying to a live environment.

- Active vulnerabilities: connect known CVEs with active packages on hosts for live visibility to active packages with associated vulnerabilities.

- CI/CD Integrations: Tighten the feedback loop and shift security left by integrating the Lacework API into CircleCI, Github, Gitlab, Jenkins, and other workflows.

- Security team reports: Shift security right with tailored reports on new active CVEs, and know definitively when a patch has been applied.

- Updated CLI for self-serve vulnerability scanning and data and a new vulnerability dashboard.

Lacework’s SaaS cloud security platform protects against threats from build-time through run-time. As a result, customers are able to access an always growing suite of well-integrated security capabilities in a central, unified solution.