Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Cloud

2/12/2020
09:45 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Tufin SecureCloud Enables Companies to Secure Hybrid Cloud Environments Without Compromising Business Speed or Agility

BOSTON – February 11, 2020 – Tufin® (NYSE: TUFN), a company pioneering a policy-centric approach to security and IT operations, today announced the availability of Tufin SecureCloud™, a security policy automation service for enterprises needing to gain visibility and control of the security posture of their cloud-native and hybrid cloud environments. SecureCloud, built from the ground up and optimized for the cloud, is a major new addition to the Tufin Orchestration Suite – establishing Tufin as the first and only vendor to unify security policy management across on-premises, cloud-native, and hybrid clouds.  

SecureCloud combines and extends the functionality previously available in Tufin Orca and Tufin Iris, and unifies cloud security policy management for container, microservices and hybrid cloud environments in a single solution – giving organizations greater visibility and control of cloud security, regardless of environment.

Today’s enterprises are rapidly moving workloads to the cloud to bring products to market quicker, be more responsive to customers’ needs, and to take advantage of business opportunities. But, all too often in today’s dynamic cloud development environments, developers have the ability to build and deploy applications, totally bypassing security. As a result, security teams find themselves with complex, fragmented networks, and lack the visibility and control required to ensure security and compliance. Ensuring the security and compliance of cloud-native and hybrid cloud environments, including Kubernetes, SecureCloud provides security policy visibility, automated security policy discovery and generation, and the ability to establish a zero trust security model, without compromising the business agility benefits of moving to the cloud or developer productivity.

According to a research report from Gartner, “Nearly all successful attacks on cloud services are the result of customer misconfiguration, mismanagement and mistakes. Security and risk management leaders should invest in cloud security posture management processes and tools to proactively and reactively identify and remediate these risks.” (Gartner “Innovation Insight for Cloud Security Posture Management,” published 25 January 2019 by Gartner Distinguished VP Analyst Neil MacDonald).

Business goals and digital transformation efforts are best met when DevOps and security teams can function most efficiently and effectively. SecureCloud’s policy automation empowers DevOps and security teams by removing the need to introduce new processes or technologies that traditionally impact business agility and create friction. Tufin SecureCloud automatically generates, provisions and synchronizes security policy changes across hybrid cloud environments.

“Enterprises are rapidly moving workloads to the cloud to gain greater business agility, achieve business goals, and drive digital transformation efforts,” said Ruvi Kitov, CEO and Co-Founder of Tufin. “However, these new workloads often integrate with systems that reside in the data center or private cloud.  With the addition of SecureCloud to the Tufin Orchestration Suite, for the first time, companies can enforce consistent policies across the entire hybrid cloud, enabling unified security policy management, regardless of environment. Tufin’s policy centric, automation-based approach to managing security enables organizations to move to the cloud without compromising on security or developer productivity.”

Tufin SecureCloud is generally available now.

For more information on SecureCloud, please visit: https://www.tufin.com/tufin-orchestration-suite/securecloud

About Tufin

Tufin (NYSE: TUFN) simplifies management of some of the largest, most complex networks in the world, consisting of thousands of firewall and network devices and emerging hybrid cloud infrastructures. Enterprises select the company’s Tufin Orchestration Suite™ to increase agility in the face of ever-changing business demands while maintaining a robust security posture. The Suite reduces the attack surface and meets the need for greater visibility into secure and reliable application connectivity. With over 2000 customers since its inception, Tufin’s network security automation enables enterprises to implement changes in minutes instead of days, while improving their security posture and business agility. 

Find out more at: www.tufin.com

Follow Tufin on Twitter: @TufinTech

Read more on Tufin’s blog: Suite Talk

 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The State of Cybersecurity Incident Response
In this report learn how enterprises are building their incident response teams and processes, how they research potential compromises, how they respond to new breaches, and what tools and processes they use to remediate problems and improve their cyber defenses for the future.
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-21553
PUBLISHED: 2021-08-03
Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific conditions, this can allow the CompAdmin user to elevate privileges and break out of Compliance mode. This is a critical vulnerability and Dell recommends upgrading at the earliest.
CVE-2021-21562
PUBLISHED: 2021-08-03
Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with (ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE) and (ISI_PRIV_SYS_UPGRADE or ISI_PRIV_AUDIT) to provide an untrusted path which can lead to run resources that are not under the application...
CVE-2021-21563
PUBLISHED: 2021-08-03
Dell EMC PowerScale OneFS versions 8.1.2-9.1.0.x contain an Improper Check for Unusual or Exceptional Conditions in its auditing component.This can lead to an authenticated user with low-privileges to trigger a denial of service event.
CVE-2021-21565
PUBLISHED: 2021-08-03
Dell PowerScale OneFS versions 9.1.0.3 and earlier contain a denial of service vulnerability. SmartConnect had an error condition that may be triggered to loop, using CPU and potentially preventing other SmartConnect DNS responses.
CVE-2021-26085
PUBLISHED: 2021-08-03
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.