A Developer-First Approach Collapsed the Time and Investment Needed to Deliver Secure Cloud Infrastructure at a Large Telecommunications Company
CWS, an IT services company helping large, heavily regulated enterprises migrate to the cloud, has partnered with Fugue, a cloud security SaaS company, to deliver developer-first cloud security for time-sensitive and mission-critical cloud deployments. Using the same policies for infrastructure as code checks and the cloud runtime environment, Fugue’s SaaS platform secures cloud infrastructure at every stage of the software development life cycle. Together, CWS and Fugue are focused on the rapid delivery of secure cloud infrastructure, starting with a large telecommunications company and resulting in a 90% faster deployment using 50% fewer engineering resources.
“Time and again we see critical cloud initiatives get bogged down in time-consuming enterprise security processes that kill development velocity,” said Rajat Sharma, founder of CWS. “After evaluating a number of tools, Fugue was the only one that addressed cloud security end-to-end using the same set of policies, reducing delivery times for security-critical cloud infrastructure from months to days and requiring only a fraction of the engineering investment previously needed.”
iTechnology Analytics News: Telos Corporation Expands U.S. Public Sector Market Reach Through DLT Solutions’ Contract Vehicles
“Security is the rate-limiting factor for how fast enterprises can go in the cloud, and key to changing this is developer-centric security based on policy as code and automated enforcement,” said Josh Stella, co-founder and CEO of Fugue. “CWS has a track record of helping engineering teams innovate fast in challenging regulatory environments, and we’re thrilled they’ve chosen Fugue as their platform for operationalizing cloud security across the software development life cycle.”
iTechnology Analytics News: TrustInSoft Exhaustive Static Analysis Proves the Security of Trusted Execution Environments
CSA CloudBytes Webinar with Fugue and CWS
Josh Stella and Rajat Sharma are delivering a session for Cloud Security Alliance’s CloudBytes webinar series to demonstrate how companies can use policy as code and automation to move faster and more securely in the cloud. For more information and registration on “Transforming Enterprise Cloud Security to Supercharge Developer Velocity,” visit www.brighttalk.com/webcast/10415/515768.
About the Fugue SaaS Platform
Fugue is the only platform with a single policy engine so engineering teams can operationalize cloud security pre- and post-deployment.
Infrastructure as Code (IaC) Security. Fugue provides IaC security for cloud resource configurations (Terraform; AWS CloudFormation) and container orchestration (Kubernetes Manifests). Cloud engineers can check their IaC configurations locally and develop custom enterprise policies using Fugue’s Unified Policy Engine, built on Open Policy Agent, the open standard for policy as code. Enterprises can centrally manage policies and ensure consistent enforcement across the organization.
Cloud Compliance. Fugue fully automates compliance assessments and reporting across Amazon Web Services, Microsoft Azure, and Google Cloud. Fugue provides turnkey coverage for SOC 2, NIST 800-53, GDPR, PCI, HIPAA, ISO 27001, CSA CCM, CIS Controls, CIS Docker, and CIS Foundations Benchmarks for Amazon Web Services (AWS), Microsoft Azure, Google Cloud, and Kubernetes. Prioritized remediation guidance helps teams bring cloud environments into compliance quickly and build confidence and trust with management, auditors and customers.
iTechnology Analytics News: GoodData Introduces No-Code UI Framework as the Second Phase of Composable Data and Analytics Suite
Cloud Native Security. Fugue detects common and complex cloud misconfiguration vulnerabilities before malicious hackers can find and exploit them. Fugue’s unified policy engine supports multi-resource rules that can evaluate configurations in context and identify vulnerabilities such as overly broad identity and access management (IAM) policies and user permissions. Teams can investigate cloud indicators of compromise (IoCs) and create a forensic audit trail of all cloud resource changes over time.
Fugue is a cloud security SaaS company enabling regulated companies such as AT&T, Red Ventures, and SAP NS2 to ensure continuous cloud security and earn the confidence and trust of customers, business leaders, and regulators. Fugue empowers engineering and security teams to automate cloud policy enforcement and move faster than ever before — without breaking the rules. Since 2013, Fugue has pioneered the use of policy-based cloud security automation and earned the patent on policy as code for cloud infrastructure.
iTechnology Analytics News: Ahana Achieves AWS Data & Analytics ISV Competency Status
[To share your insights with us, please write to sghosh@martechseries.com]
