Infrastructure-as-code provider Pulumi Corp. today announced two security products that expand its platform to automate, secure and manage cloud infrastructure everywhere.

Announced at the company’s fourth annual PulumiUp conference, the first new security product,  Pulumi ESC — ESC stands for environments, secrets and configuration — offers automated cloud security with centralized secrets management that appeals to engineers.

The service allows engineers to group, secure and tag version-related secrets and configurations with the “concept of environments.” ESC has been designed to make security best practices, such as dynamic, short-lived credentials, the default and integrates with other popular secret stores, including 1Password, Amazon Web Services Inc., Azure, Google Cloud and HashiCorp Vault.

ESC delivers a unified workflow and pane of glass into all secrets and works well for infrastructure automation, but can be used for any workload that requires configuration and secrets, including applications and Kubernetes workloads.

The second new release, Pulumi Insights, offers intelligent cloud management and complete cloud asset inventory, with search, analytics and artificial inteligence over the cloud. The service includes support for resources not provisioned by Pulumi IaC, such as AWS CloudFormation, Microsoft ARM and HashiCorp Terraform, along with cloud consoles and software development kits.

With Pulumi Insights, users can visualize resource relationships using graphs and pivot tables that surface explicit and automatically inferred dependencies. The service automatically detects security, compliance and misconfiguration issues with automated remediation and can also bring resources under infrastructure as code control. Designed to be extensible, it features support for third-party integrations with Kubecost and Snyk currently in development.

The two new releases support Pulumi IaC, the company’s existing offering that offers cloud automation of applications and infrastructure as code in any programming language, including Python, Go, TypeScript, .NET and Java. Pulumi IaC automates the entire cloud infrastructure lifecycle and is claimed by the company to deliver superior time to market.

Pulumi is a venture capital-backed startup that has raised about $99 million to date, including a Series C round of $41 million in October. Investors in the company include Madrona Venture Group, New Enterprise Associates Inc., Tola Capital and Strike Capital.

Image: Pulumi