Check Point® Software Technologies Ltd. announced new Infinity Platform capabilities to accelerate zero trust, strengthen threat prevention, reduce complexity, and simplify security operations.
Noname Security announced a partnership with Wiz to help customers improve security posture by enabling complete visibility, context, and control of infrastructure hosting mission-critical and highly sensitive APIs to minimize and remediate risk.
Noname’s API Security Platform is a modern and flexible solution that ties together all the critical capabilities in API security in one platform. Wiz’s cloud security platform connects in minutes to scan the full cloud environment without agents, finds toxic combinations of exposure that represent real risk and delivers accurate risk prioritization. Noname Security collects and processes findings from Wiz and displays them on the Noname platform to provide customers with the most comprehensive view of an organization's APIs. Together, Noname Security and Wiz enable complete visibility, context, and control of infrastructure hosting mission-critical and highly sensitive APIs to minimize and remediate risk.
“While APIs enable business, they require proper build, deployment, and maintenance to ensure viable security,” said Aner Morag, Vice President of Technology of Noname Security. “Wiz is a clear leader in cloud security and is the fastest-growing software company ever due to the company’s success in protecting and servicing hundreds of the world’s leading organizations. We’re proud to partner with their team to provide customers with visibility and intelligence across their API ecosystem to find, build, and maintain secure APIs throughout the entire lifecycle.”
With this partnership, customers of Wiz and Noname Security will be able to:
Proactively Improve Security Posture:
- See the full picture – Easily discover mission-critical infrastructure and APIs.
- Increase situational awareness – Gain complete visibility into API and infrastructure interactions.
- Identify toxic combinations of real risk and attack paths – Customers using Wiz and Noname gain more context about their APIs and the infrastructure components they interact with.
- Turn insights into action – Custom workflows from Noname let you take infrastructure insights from Wiz and fix issues before they’re exploited.
Find and Fix Breaches Faster:
- Rapid integration – Easily connect with Wiz to see even more context.
- Prioritize risks – Accurately prioritize risk to stop data exfiltration.
- Deeper investigation – Analyze attacker behavior, identify attack paths, and focus remediation efforts.
- Take action immediately, automatically – Integrations to the rest of your infrastructure for automatic remediation, including updating WAF policies, creating tickets, and flagging issues for additional investigation.
Ensure Compliance:
- Monitor APIs – Stay compliant with industry standards, data privacy laws, and other requirements, including PCI-DSS, GDPR, CCPA, HIPAA, and more.
- Identify sensitive data with data classification – Understand which APIs handle sensitive data and which infrastructure components they connect with.
- Data Residency – Keep sensitive data in-country with data residency monitoring
- Policy Enforcement – Create custom policies to ensure continuous compliance with changing rules, regulations, and requirements.
“Together, Noname Security and Wiz provide security, application and cloud technology teams with complete visibility into their entire API ecosystem to ensure confidentiality, integrity, context and availability while also reducing time to market and increasing application uptime,” said Oron Noah, Director of Product Management at Wiz. “We are proud to combine Wiz's Cloud Native Application Protection Platform with Noname Security's API security platform to provide customers with full cyber-risk coverage.”
Industry News
WaveMaker announced the release of WaveMaker AutoCode, an AI-powered plugin for the Figma universe that produces pixel-perfect front-end components with lightning fast accuracy.
DoiT announced the acquisition of PerfectScale, an automated Kubernetes (K8s) optimization and governance platform.
Parasoft earned a top spot as a Leader and Fast Mover in the latest GigaOm Radar Report on API Functional Automated Testing.
Linux Foundation Europe and OpenSSF announced a global joint-initiative to help prepare maintainers, manufacturers, and open source stewards for the implementation of the EU Cyber Resilience Act (CRA) and future cybersecurity legislation targeting jurisdictions around the world.
OutSystems announced the general availability (GA) of Mentor on OutSystems Developer Cloud (ODC).
Kurrent announced availability of public internet access on its managed service, Kurrent Cloud, streamlining the connectivity process and empowering developers with ease of use.
MacStadium highlighted its major enterprise partnerships and technical innovations over the past year. This momentum underscores MacStadium’s commitment to innovation, customer success and leadership in the Apple enterprise ecosystem as the company prepares for continued expansion in the coming months.
Traefik Labs announced the integration of its Traefik Proxy with the Nutanix Kubernetes Platform® (NKP) solution.
Perforce Software announced the launch of AI Validation, a new capability within its Perfecto continuous testing platform for web and mobile applications.
Mirantis announced the launch of Rockoon, an open-source project that simplifies OpenStack management on Kubernetes.
Endor Labs announced a new feature, AI Model Discovery, enabling organizations to discover the AI models already in use across their applications, and to set and enforce security policies over which models are permitted.
Qt Group is launching Qt AI Assistant, an experimental tool for streamlining cross-platform user interface (UI) development.
Sonatype announced its integration with Buy with AWS, a new feature now available through AWS Marketplace.
Endor Labs, Aikido Security, Arnica, Amplify, Kodem, Legit, Mobb and Orca Security have launched Opengrep to ensure static code analysis remains truly open, accessible and innovative for everyone: