DEVOPSdigest

Datadog announced Security Monitoring, a new product that enables real-time threat detection across the entire stack and deeper collaboration between security, developers, and operations teams.

Modern security teams work closely with developers and operations as they build new products, to help them protect against threats in cloud-native environments. At the same time, security teams increasingly require the same visibility that developers and operations do. To address these challenges, Datadog’s Security Monitoring product processes monitoring data from the infrastructure, the network, applications, and security devices to surface potential threats. With threat detection rules directly operating in real-time on ingested streams, Datadog’s Security Monitoring maximizes coverage without any of the traditionally associated performance or cost concerns.

“Our customers are moving into a world in which security must become a shared responsibility across engineering teams to address the increased complexity and scale of their environments,” said Marc Tremsal, Director of Product Management at Datadog. “We built Security Monitoring to break down silos between security professionals and their DevOps peers, and provide real-time threat detection in modern hybrid cloud environments.”

Datadog Security Monitoring provides powerful threat detection with the following capabilities:

- Unique Security Insights: Observability data, including infrastructure metrics, traces, and logs from Datadog’s 350+ existing integrations, and security-related integrations including AWS GuardDuty, AWS CloudTrail, Okta, Google Suite, and others -- combined in one platform to provide high fidelity security signals.

- Out-of-the-Box and Editable Threat Detection Rules: Rules curated by Datadog to detect widespread attacker techniques, so users can get started in minutes, without professional services. Users can also write and fine-tune their own rules without learning a proprietary query language.

- Real-Time Detection “Without Limits”: Rules are applied in real-time, as logs and events are ingested, with no prerequisite to index them.

- Collaborative Investigations with Existing Tools: Email, Slack, PagerDuty, JIRA, ServiceNow, etc. Reach developers and security users where they already work.

Datadog's Security Monitoring brings greater visibility with one centralized platform shared by development, operations, and security teams.