Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Cloud

2/12/2020
09:45 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Tufin SecureCloud Enables Companies to Secure Hybrid Cloud Environments Without Compromising Business Speed or Agility

BOSTON – February 11, 2020 – Tufin® (NYSE: TUFN), a company pioneering a policy-centric approach to security and IT operations, today announced the availability of Tufin SecureCloud™, a security policy automation service for enterprises needing to gain visibility and control of the security posture of their cloud-native and hybrid cloud environments. SecureCloud, built from the ground up and optimized for the cloud, is a major new addition to the Tufin Orchestration Suite – establishing Tufin as the first and only vendor to unify security policy management across on-premises, cloud-native, and hybrid clouds.  

SecureCloud combines and extends the functionality previously available in Tufin Orca and Tufin Iris, and unifies cloud security policy management for container, microservices and hybrid cloud environments in a single solution – giving organizations greater visibility and control of cloud security, regardless of environment.

Today’s enterprises are rapidly moving workloads to the cloud to bring products to market quicker, be more responsive to customers’ needs, and to take advantage of business opportunities. But, all too often in today’s dynamic cloud development environments, developers have the ability to build and deploy applications, totally bypassing security. As a result, security teams find themselves with complex, fragmented networks, and lack the visibility and control required to ensure security and compliance. Ensuring the security and compliance of cloud-native and hybrid cloud environments, including Kubernetes, SecureCloud provides security policy visibility, automated security policy discovery and generation, and the ability to establish a zero trust security model, without compromising the business agility benefits of moving to the cloud or developer productivity.

According to a research report from Gartner, “Nearly all successful attacks on cloud services are the result of customer misconfiguration, mismanagement and mistakes. Security and risk management leaders should invest in cloud security posture management processes and tools to proactively and reactively identify and remediate these risks.” (Gartner “Innovation Insight for Cloud Security Posture Management,” published 25 January 2019 by Gartner Distinguished VP Analyst Neil MacDonald).

Business goals and digital transformation efforts are best met when DevOps and security teams can function most efficiently and effectively. SecureCloud’s policy automation empowers DevOps and security teams by removing the need to introduce new processes or technologies that traditionally impact business agility and create friction. Tufin SecureCloud automatically generates, provisions and synchronizes security policy changes across hybrid cloud environments.

“Enterprises are rapidly moving workloads to the cloud to gain greater business agility, achieve business goals, and drive digital transformation efforts,” said Ruvi Kitov, CEO and Co-Founder of Tufin. “However, these new workloads often integrate with systems that reside in the data center or private cloud.  With the addition of SecureCloud to the Tufin Orchestration Suite, for the first time, companies can enforce consistent policies across the entire hybrid cloud, enabling unified security policy management, regardless of environment. Tufin’s policy centric, automation-based approach to managing security enables organizations to move to the cloud without compromising on security or developer productivity.”

Tufin SecureCloud is generally available now.

For more information on SecureCloud, please visit: https://www.tufin.com/tufin-orchestration-suite/securecloud

About Tufin

Tufin (NYSE: TUFN) simplifies management of some of the largest, most complex networks in the world, consisting of thousands of firewall and network devices and emerging hybrid cloud infrastructures. Enterprises select the company’s Tufin Orchestration Suite™ to increase agility in the face of ever-changing business demands while maintaining a robust security posture. The Suite reduces the attack surface and meets the need for greater visibility into secure and reliable application connectivity. With over 2000 customers since its inception, Tufin’s network security automation enables enterprises to implement changes in minutes instead of days, while improving their security posture and business agility. 

Find out more at: www.tufin.com

Follow Tufin on Twitter: @TufinTech

Read more on Tufin’s blog: Suite Talk

 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
COVID-19: Latest Security News & Commentary
Dark Reading Staff 10/27/2020
Chinese Attackers' Favorite Flaws Prove Global Threats, Research Shows
Kelly Sheridan, Staff Editor, Dark Reading,  10/27/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Special Report: Computing's New Normal
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
How IT Security Organizations are Attacking the Cybersecurity Problem
How IT Security Organizations are Attacking the Cybersecurity Problem
The COVID-19 pandemic turned the world -- and enterprise computing -- on end. Here's a look at how cybersecurity teams are retrenching their defense strategies, rebuilding their teams, and selecting new technologies to stop the oncoming rise of online attacks.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-27742
PUBLISHED: 2020-10-28
An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msg_confirm_move template. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926&qu...
CVE-2020-27980
PUBLISHED: 2020-10-28
Genexis Platinum-4410 P4410-V2-1.28 devices allow stored XSS in the WLAN SSID parameter. This could allow an attacker to perform malicious actions in which the XSS popup will affect all privileged users.
CVE-2020-24990
PUBLISHED: 2020-10-28
An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files via a TFTP GET request, as demonstrated by reading /etc/passwd or /proc/version.
CVE-2020-25204
PUBLISHED: 2020-10-28
The God Kings application 0.60.1 for Android exposes a broadcast receiver to other apps called com.innogames.core.frontend.notifications.receivers.LocalNotificationBroadcastReceiver. The purpose of this broadcast receiver is to show an in-game push notification to the player. However, the applicatio...
CVE-2020-27739
PUBLISHED: 2020-10-28
A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack recently logged-in users' sessions. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread.