For a long time, security teams have been able to mostly rely on the safety of a security perimeter, but with things like IoT, embedded development, and now remote and hybrid work, this notion of a defensible perimeter is totally gone. Having all of these connected devices that don’t live under one network expands the … continue reading
The following is a listing of DevSecOps tool providers, along with a brief description of their offerings. Bridgecrew by Prisma Cloud automates security from code to cloud. By embedding earlier in the DevOps lifecycle, Bridgecrew enables developers to write secure code without slowing them down. In addition to its DevSecOps tools and integrations, Bridgecrew’s platform … continue reading
We asked these tool providers to share more information on how their solutions help companies with security in remote or hybrid settings. Their responses are below. Guy Eisenkot, VP of product and co-founder of Bridgecrew by Prisma Cloud As hybrid work environments and cloud infrastructure environments become the norm, organizations’ attack surfaces are only getting … continue reading
Bridgecrew, the cloud security company, today announced the launch of Smart Fixes, which work as fix suggestions for IaC policy violations sourced directly from code. Bridgecrew’s Smart Fixes work by automatically tracking code changes that fixed a policy violation and if the same code change is used frequently, Smart Fixes will suggest that change for … continue reading
Bridgecrew has announced the release of Checkov 2.0. Checkov is a static code analysis tool specifically designed for Infrastructure as Code (IaC). “Policies that take into account interdependencies within IaC are critical to understanding the impact of misconfigurations,” said Rob Eden, senior engineer and Checkov contributor. “It’s not enough to know that a security group … continue reading
Bridgecrew has announced it is shifting cloud security left with a new solution that notifies developers about infrastructure as code (IaC) misconfigurations and policy violations early in the life cycle and directly inside their IDEs. “While Bridgecrew’s mission is to ensure infrastructure security at every stage of the development lifecycle — from code and build, … continue reading
