Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Cloud

2/12/2020
09:45 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Tufin SecureCloud Enables Companies to Secure Hybrid Cloud Environments Without Compromising Business Speed or Agility

BOSTON – February 11, 2020 – Tufin® (NYSE: TUFN), a company pioneering a policy-centric approach to security and IT operations, today announced the availability of Tufin SecureCloud™, a security policy automation service for enterprises needing to gain visibility and control of the security posture of their cloud-native and hybrid cloud environments. SecureCloud, built from the ground up and optimized for the cloud, is a major new addition to the Tufin Orchestration Suite – establishing Tufin as the first and only vendor to unify security policy management across on-premises, cloud-native, and hybrid clouds.  

SecureCloud combines and extends the functionality previously available in Tufin Orca and Tufin Iris, and unifies cloud security policy management for container, microservices and hybrid cloud environments in a single solution – giving organizations greater visibility and control of cloud security, regardless of environment.

Today’s enterprises are rapidly moving workloads to the cloud to bring products to market quicker, be more responsive to customers’ needs, and to take advantage of business opportunities. But, all too often in today’s dynamic cloud development environments, developers have the ability to build and deploy applications, totally bypassing security. As a result, security teams find themselves with complex, fragmented networks, and lack the visibility and control required to ensure security and compliance. Ensuring the security and compliance of cloud-native and hybrid cloud environments, including Kubernetes, SecureCloud provides security policy visibility, automated security policy discovery and generation, and the ability to establish a zero trust security model, without compromising the business agility benefits of moving to the cloud or developer productivity.

According to a research report from Gartner, “Nearly all successful attacks on cloud services are the result of customer misconfiguration, mismanagement and mistakes. Security and risk management leaders should invest in cloud security posture management processes and tools to proactively and reactively identify and remediate these risks.” (Gartner “Innovation Insight for Cloud Security Posture Management,” published 25 January 2019 by Gartner Distinguished VP Analyst Neil MacDonald).

Business goals and digital transformation efforts are best met when DevOps and security teams can function most efficiently and effectively. SecureCloud’s policy automation empowers DevOps and security teams by removing the need to introduce new processes or technologies that traditionally impact business agility and create friction. Tufin SecureCloud automatically generates, provisions and synchronizes security policy changes across hybrid cloud environments.

“Enterprises are rapidly moving workloads to the cloud to gain greater business agility, achieve business goals, and drive digital transformation efforts,” said Ruvi Kitov, CEO and Co-Founder of Tufin. “However, these new workloads often integrate with systems that reside in the data center or private cloud.  With the addition of SecureCloud to the Tufin Orchestration Suite, for the first time, companies can enforce consistent policies across the entire hybrid cloud, enabling unified security policy management, regardless of environment. Tufin’s policy centric, automation-based approach to managing security enables organizations to move to the cloud without compromising on security or developer productivity.”

Tufin SecureCloud is generally available now.

For more information on SecureCloud, please visit: https://www.tufin.com/tufin-orchestration-suite/securecloud

About Tufin

Tufin (NYSE: TUFN) simplifies management of some of the largest, most complex networks in the world, consisting of thousands of firewall and network devices and emerging hybrid cloud infrastructures. Enterprises select the company’s Tufin Orchestration Suite™ to increase agility in the face of ever-changing business demands while maintaining a robust security posture. The Suite reduces the attack surface and meets the need for greater visibility into secure and reliable application connectivity. With over 2000 customers since its inception, Tufin’s network security automation enables enterprises to implement changes in minutes instead of days, while improving their security posture and business agility. 

Find out more at: www.tufin.com

Follow Tufin on Twitter: @TufinTech

Read more on Tufin’s blog: Suite Talk

 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Why Vulnerable Code Is Shipped Knowingly
Chris Eng, Chief Research Officer, Veracode,  11/30/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-27348
PUBLISHED: 2020-12-04
In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both plug the home interface or similar. This issue affects snapcraft versions prior to 4.4.4, prior to 2.43...
CVE-2020-16123
PUBLISHED: 2020-12-04
An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail to identify a client connection from a snap as coming from a snap if SCM_CREDENTIALS were missing, allowing the snap to connect to PulseAudio without proper confinement. This could be exploited by...
CVE-2018-21270
PUBLISHED: 2020-12-03
Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream (when using Node.js 4.x).
CVE-2020-26248
PUBLISHED: 2020-12-03
In the PrestaShop module "productcomments" before version 4.2.1, an attacker can use a Blind SQL injection to retrieve data or stop the MySQL service. The problem is fixed in 4.2.1 of the module.
CVE-2020-29529
PUBLISHED: 2020-12-03
HashiCorp go-slug before 0.5.0 does not address attempts at directory traversal involving ../ and symlinks.