SECURITY
SECURITY
SECURITY
Palo Alto Networks aims to secure DevOps workflows with new Prisma Cloud release
Palo Alto Networks Inc. today debuted a new release of Prisma Cloud, its cloud security platform, that adds features for blocking vulnerabilities during the application development and deployment process.
Prisma Cloud combines several different technologies that Palo Alto Networks obtained through a recent startup acquisition spree. The company shelled out more than $1 billion on acquisitions in 2019 alone.
Palo Alto Networks is introducing a policy engine for securing continuous integration and continuous delivery pipelines. CI/CD pipelines are automated workflows that enterprise software teams use to roll out code to production. Prisma Cloud now lets administrators set up policies to ensure that code deployment workflows comply with the industry-standard CIS set of security best practices and other security standards.
“Customers now have the ability to set policies for vulnerability and compliance governing CI and CD workflows directly from the centralized Prisma Cloud dashboard, “John Morello, Palo Alto Networks’ head of product for container and serverless security, wrote in a blog post.
The new Prisma Cloud release also adds a tool for protecting cloud application components hosted on AWS Lambda, Amazon Web Services Inc.’s widely used serverless computing service. The tool is based on technology that Palo Alto Networks obtained through the purchase of PureSec Ltd. in mid-2019. PureSec’s technology scans a Lambda workload to find misconfigurations and other security issues, then creates a sort of virtual shield around the workload that prevents hackers from exploiting the flaws.
Capping off the update are improvements to Prisma Cloud’s vulnerability scanning features. The platform can now look for insecure configuration settings in infrastructure-as-code templates, blueprints that engineers use to quickly set up cloud environments according to a certain predefined specification. In the same spirit, the release adds the ability to look for vulnerabilities inside AMIs, which serve a similar function as infrastructure-as-code templates on AWS.
“This provides DevOps and security teams with added visibility into the security posture of their AMIs before they’re ever deployed,” Palo Alto Networks’ Morello wrote.
Photo: Palo Alto Networks
A message from John Furrier, co-founder of SiliconANGLE:
Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.
- 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
- 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network
Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: https://siliconangle.com/aws-marketplace/
About SiliconANGLE Media
SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.
Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.
