devopsy.kinsta.cloud

Author: Veronica Haggar

  • Vectra and Zscaler Enable Zero Trust Visibility into Business-Critical Applications

    San Jose, CA, May 18, 2021 — Vectra AI, a leader in threat detection and response, today announced a deep product integration with Zscaler Private Access™ (ZPA) to provide end-to-end access visibility and protection from remote workers to business-critical applications.

    With this integration, security operation centers (SOCs) can achieve zero trust access visibility. ZPA provides secure access to business-critical internal applications, whether they are located on-prem or in the public cloud, based on the identity of the user and defined access policies that adapt based on context. Vectra collects, detects and prioritizes high-fidelity alerts in real time and responds with automated enforcement or alerts to security personnel. This gives organizations complete visibility across their network to the cloud – allowing them to stop attacks like ransomware or data loss.

    The Vectra Cognito Platform is designed to detect and respond to threats inside cloud, data center, IoT, and enterprise networks before attackers can breach organizations and cause irreparable damage. This arms security teams with the ability to prevent attacks earlier in the kill chain while ensuring that applications necessary for business continuity are available and accessible to the extended workforce.

    Adapting to a hybrid remote work model has facilitated a digital transformation that rendered traditional network security practices obsolete as more work is taking place outside the corporate boundary, than within it. Threat actors have been quick to follow and are actively taking advantage of this expanded attack surface. To secure remote work Zscaler and Vectra have joined forces to combine zero trust access with AI-powered threat detection to help empower their joint customers with the ability to provide users with fast, secure, and monitored access to business-critical applications through modern security-as-a-service platforms.

    “The use of legacy network security solutions has robbed many organizations of the visibility needed to withstand the fight against modern-day attacks,” said Randy Schirman, Vectra VP, Partnerships. “Through our market-leading approach to NDR and this strategic integration with Zscaler, customers benefit from continuous account monitoring, quick identification of malicious intent or insiders, and full visibility into their ecosystem before attacks lead to breaches.”

    Integration benefits include:

    • Reduced risk – ZPA’s ability to connect users to private apps without placing them on the network or exposing apps to the Internet, combined with the Vectra identity and network detection and response capabilities significantly reduces ransomware attacks, minimizes threat of malicious insiders, as well as any potential business disruption that comes of it.
    • Increased SOC efficiency – Remove the need for tedious tasks related to threat hunting and threat analysis. Automatic prioritization of alerts augments your SOC, and one-click drill down and pivot between consoles, as well as cross-platform workflow, expedites investigation and response by up to 34x.
    • Access visibility – Enhanced visibility into access events – Customers can use this integration for comprehensive visibility into what users are accessing and identify the potential threat landscape.
    • Secure zero trust architecture – ZPA brokers secure connections between users and the applications they need for work while monitoring access and identity usage to detect and remediate threats with Vectra.

    “The challenge that security leaders face is enabling a modern workplace without increasing risk. We see that traditional remote access solutions are being exploited.  The integration with Vectra enables our joint customers to safely enable work from anywhere through our modern zero trust architecture and Vectra’s AI-powered threat detection and response,” said Amit Raikar, Vice President of Technology Alliances and Business Development, Zscaler. “Together our customers have a safer alternative they can actually rely on with visibility and secure access across hybrid networks.”

    To learn more about this integration, please visit  https://www.vectra.ai/technology-partners/zscaler or read our companion blog.

    About Vectra

    Vectra® is the leader in threat detection and response – from cloud and data center workloads to user and IoT devices. Its Cognito® platform accelerates threat detection and investigation using AI to enrich network metadata it collects and stores with the right context to detect, hunt and investigate known and unknown threats in real time. Vectra offers four applications on the Cognito platform to address high-priority use cases. Cognito Stream™ sends security-enriched metadata to data lakes and SIEMs. Cognito Recall™ is a cloud-based application to store and investigate threats in enriched metadata. Cognito Detect™ uses AI to reveal and prioritize hidden and unknown attackers at speed. And Cognito Detect for Office 365 and Azure AD™ finds and stops attacks in enterprise SaaS applications and the Microsoft 365 ecosystem. For more information, visit vectra.ai.

  • Cortex Secures $2.5M in Funding from Sequoia — New Reliability as Code Platform Provides Comprehensive Microservices Visibility and Control for Engineering and SRE Teams

    Funding drives new platform capabilities, including microservice quality scorecards and initiatives, to accelerate best practices

    San Francisco, CA, May 18, 2021 — Reliability as Code pioneer Cortex today announced that it has secured $2.5 million in seed funding led by Sequoia Capital. The new funds will accelerate development of the Cortex platform, which enables engineering leaders and site reliability engineers (SREs) to move beyond manual processes to gain visibility and control of rapidly expanding microservices. Bogomil Balkansky, a partner at Sequoia, joins the Cortex board of directors. Additional investors in the round include Y Combinator, Scott Belsky, CPO at Adobe; Gokul Rajaram, board member of Pinterest and Coinbase; Sam Lambert, CPO of PlanetScale; Manik Gupta, former CPO of Uber and Mathilde Collin, CEO and founder of Front. 

    “Microservices are becoming ubiquitous because they help engineering teams move faster and with lower risk,” said Balkansky. “But microservices proliferation has side effects: engineering and SRE leaders are challenged to track what services exist, how they depend on one another and what their quality is. The Cortex platform puts all that information at their fingertips, and makes it easy to launch team-wide initiatives to improve service quality.” 

    “The rapid rate with which we have moved from monolithic application architectures to microservices, and the rapid service ‘sprawl’ that we have seen as a result have left DevOps and SRE teams in precarious positions,” said Torsten Volk, managing research director, Enterprise Management Associates. “The fact is that no organization knows everything that’s going on in their environments. This leads to development inefficiencies, internal conflict, wasted time and high costs. Platforms that give these teams the ability to optimize their microservices mix with Reliability as Code provide strong value in the market today.” 

    From legacy manual processes to Reliability as Code
    Engineering and SRE leaders today depend on tribal knowledge and spreadsheets to track and optimize microservices, leading to surprise outages, security vulnerabilities and loss of time and money. The Cortex Reliability as Code platform is designed to automatically score services against best practices, migrations and SLOs. With the shift from legacy manual processes to Reliability as Code, Cortex provides a single-pane-of-glass for visualization of service ownership, documentation and performance history, giving engineering and SRE teams the visibility and control they need, even as teams shift, people move, platforms change and microservices continue to grow. 

    “Cortex built bridges among our SRE and our engineering team by providing a single source of truth for Production Readiness Review (PRR) for our microservices,” said Riadh Amari, senior SRE manager at Namely. “Now engineering leaders and SREs aren’t just constantly reminding people to adhere to best practices. They provide critical data on service performance and improve reliability consistently and with minimal friction. Cortex has completely changed their role and elevated their strategic importance to the entire organization.”

    “Cortex is a great tool for tracking and managing migrations and best practices. It makes answering complex questions around the number of services and service ownership very simple and a matter of just a few clicks,” said Tanmay Sardesai, software engineer at Clever. “Cortex has also eliminated many spreadsheets that we used to track migrations. It is slowly becoming the one-stop shop for tracking service performance and metadata in our org.”

    The Cortex platform features an automatic onboarding workflow that scans all potential microservices sources, discovers the microservices, maps metadata to them and infers critical information such as ownership and on-call rotations. The platform then generates a dashboard illustrating relevant metrics for each of more than 30 third-party tools, including Datadog, Sonarqube, Snyk and PagerDuty. These integrations let engineers quickly access on-call rotations, latency dashboards, open vulnerabilities and more in one searchable dashboard. Each integration includes individual rules that enable users to drill down into specific metrics to grade the quality of their services via customizable “scorecards.” This enables development of production readiness checklists, security audits and evaluations of operation and development maturity. 

    New capabilities of the platform include: 

    • Microservices Quality Scorecards keep teams accountable for following best SRE/security/infra best practices by ‘gamifying’ service quality. Scorecards stack-rank services based on detailed performance metrics which motivates service owners to improve either performance, or decommission unused or unmanaged services.
    • Cortex Query Language (CQL), a domain-specific language, lets users write granular rules about health of deploys, SLOs, on-call rotations, security vulnerabilities, package versions and more, such as, “if the service is a production service, then there must be an on-call rotation and greater than 85% test coverage.” This enables engineering and SRE leaders to track and enforce service quality across the entire engineering organization. Engineers can set reliability standards across teams and types of services through direct integrations with a variety of tools.
    • Initiatives help drive progress towards meeting service metrics over a specified time period, letting users set goals and deadlines in a scorecard, making service quality a moving target for the team. Cortex messages service owners over Slack or email with their action items, which engineers can also see when they login to the Cortex dashboard. Initiatives align the team towards a common goal within a scorecard and help accelerate progress as a result.

    “Cortex is working to address the pains and pressures that we and our colleagues at other leading tech companies felt when we were in the DevOps and SRE trenches and that are leading to burnout across these teams all over the world,” said Anish Dhar, CEO and co-founder, Cortex. “The rapid sprawl of microservices, combined with the archaic processes currently being applied to their management, are creating an unsustainable future for SREs and for the cloud. We are very pleased to have brought this much-needed Reliability as Code platform to market and are looking forward to seeing what our users will be able to achieve by leveraging the platform.” 

    About Cortex 

    Cortex is the leading Reliability as Code platform, designed to give engineers and SREs comprehensive microservices visibility and control. Cortex provides a single-pane-of-glass for visualization of service ownership, documentation and performance history, replacing “tribal knowledge” and spreadsheets. This gives engineering and SRE teams the visibility and control they need over their services, even as teams shift, people move, platforms change and microservices continue to grow. Cortex is a YCombinator Company backed by Sequoia Capital. For more information, visit www.getcortexapp.com or see us on Twitter at @GetCortexApp.

  • Orca Security Achieves AWS Security Competency Status

    Standout Achievement Demonstrates Orca Security’s Technical Proficiency And Customer Success in Detecting and Prioritizing Critical Security Risks in AWS Environments

    Los Angeles, CA, May 18, 2021 – Orca Security announced today that it has achieved Amazon Web Services (AWS) Security Competency status. This key designation recognizes that Orca Security has demonstrated proven technology and deep expertise to help AWS customers achieve their cloud security goals. As an AWS technology and co-sell partner, Orca is committed to working closely with AWS customers to secure their cloud estates from increasing threats.

    Orca Security is one of only nine companies in the cloud vulnerability and configuration analysis category to achieve the AWS Security Competency. This differentiates Orca Security as an AWS Partner Network (APN) member that provides specialized software designed to help enterprises adopt, develop and deploy complex security projects on AWS. To receive this designation, APN Partners must show that multiple customers have validated their technology for the specific competency, possess deep AWS expertise with a well architected infrastructure and deliver solutions seamlessly on AWS.

    “We’re proud to be one of the fastest cybersecurity companies to achieve the AWS Security Competency status, furthering our commitment to help customers accelerate their AWS migrations and confidently expand their AWS estates,” said Avi Shua, CEO and Co-Founder, Orca Security. “Orca Security is dedicated to helping organizations achieve their security goals by combining our SideScanning™ technology with the powerful security tools AWS provides to give customers full visibility into every aspect of their cloud estate.”

    AWS is enabling scalable, flexible, and cost-effective solutions from startups to global enterprises. To support the seamless integration and deployment of these solutions, AWS established the AWS Competency Program to help customers identify Consulting and APN Technology Partners with deep industry experience and expertise.

    Orca Security on AWS

    Orca Security provides cloud-wide, workload-deep, context-aware security and compliance for AWS without the gaps in coverage, alert fatigue, and operational costs of agent-based solutions. The Orca Cloud Security platform  protects AWS workloads including EC2, EKS, ECS, Fargate, and Lambda as well as finding configuration issues in the native services.

    Orca Security integrates through the AWS runtime storage layer and combines this with metadata gathered from AWS APIs to detect risks across both the workload and control plane. Customers can easily scan S3 buckets for personally identifiable information (PII) and malware without moving or storing the underlying data. Orca Security also enables AWS customers to leverage CloudTrail events to trigger new scans and update risk levels as configurations change in near real time. With Orca Security, customers can inspect Identity Access Management (IAM) policies, generate alerts, and visualize issues simultaneously via an access risk map.

    Key Developments of the Orca Security + AWS Partnership:

    • Available on AWS Marketplace: Orca Security is listed in the AWS Marketplace and customers are able to procure its solution as a private offer or through a consulting partner.
    • Integration with AWS Image Builder: With AWS Image Builder support, Orca Security directly integrates with customers’ CI/CD pipeline to ensure DevOps teams ship secured and verified images to production.
    • Service Ready for AWS Linux 2: Through quality assurance and security tests, Orca Security has been validated to provide support for Amazon Linux and Amazon Linux 2 platform of discovery.

    AWS Co-Selling Program: Orca Security is part of the technology partner co-selling program that works together with AWS teams to maximize joint customer value.

    Live Oak Bank Finds Multiple Tools in One with Orca Security

    Orca Security’s patent-pending SideScanning™ technology reads workloads’ runtime block storage out-of-band to detect all essential security risks across every layer of the cloud. Orca Security eliminates the need to cobble together disparate tools, and replaces legacy vulnerability assessment tools, CSPM, CWPP solutions, and more.

    “We plan to replace several one-off solutions with Orca Security, because Orca Security does much more than just vulnerability scanning,” said Thomas Hill, CISO, Live Oak Bank. “It looks for data loss prevention. It does virus scanning. It performs an inventory. Orca does it all, while saving us both time and money.”

    Additional Resources

    About Orca Security  

    Orca Security, the cloud security innovation leader, provides cloud-wide, workload-deep security and compliance for AWS, Azure, and GCP – without the gaps in coverage, alert fatigue, and operational costs of agents.

    Unlike competing tools that operate in silos, Orca treats your cloud as an interconnected web of assets, prioritizing risk based on the severity of the underlying security issue combined with environmental context, including its accessibility and potential damage to the business. This does away with thousands of meaningless security alerts to provide just the critical few that matter, along with their precise path to remediation.

    Find critical attack vectors before your adversaries without having to cobble together disparate tools for cloud security posture management, compliance assessments, and workload and data protection. Delivered as SaaS, Orca Security’s patent-pending SideScanning™ technology reads your cloud configuration and workloads’ runtime block storage out-of-band, detecting vulnerabilities, malware, misconfigurations, lateral movement risk, weak and leaked passwords, and unsecured PII. SideScanning™ covers all your workloads–VMs, containers, and serverless.

    Orca Security deploys in minutes – not months – because no code runs within your cloud environment. With Orca, there are no overlooked assets, no DevOps headaches, and no performance hits on live environments.

    Connect your first cloud account in minutes and see for yourself. Visit https://orca.security.

  • Accurics Completes SOC 2 Type 1 Certification

    Pleasanton, CA, May 18, 2021 – Accurics, the cloud cyber resilience specialist, today announced that it has successfully achieved SOC 2 Type 1 standard compliance for its developer-first cloud security platform. Schellman & Company conducted an in-depth audit and attests that Accurics meets SOC 2 requirements for security, availability, and confidentiality.

    In today’s digital economy, organizations are leveraging the cloud to provide SaaS services more than ever before, and businesses are increasingly relying on third-party vendors to perform core business operations. This has necessitated greater transparency into vendors’ information security measures to ensure the security, availability, processing, integrity, and confidentiality of customer data.

    Schellman & Company’s independent validation of Accurics’ security controls is vital for customers in highly-regulated industries such as financial services, healthcare, and telecommunications. It affirms Accurics’ security practices, service commitments, and system requirements meet the standards in the TSP section 100, Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (AICPA, Trust Services

    Criteria).

    “In order for organizations to continue to drive innovation forward using cloud-based services, they need to feel confident in the security of those providers,” said Accurics CTO, CISO, and Co-founder, Om Moolchandani. “At Accurics, keeping our customer data secure is the top priority, and Schellman & Company’s rigorous audit and SOC 2 certification validates our ongoing commitment to protect our customers’ sensitive data.”

    The SOC 2 Type 1 report is available to Accurics customers and prospects upon request.

    About Accurics

    At Accurics™, we envision a world where organizations can innovate in the cloud with confidence. Our mission is to enable organizations to achieve cloud cyber resilience with developer-first security that self-heals the cloud. The Accurics platform programmatically detects infrastructure misconfigurations and contextualizes the findings with application risks to identify breach paths throughout the development lifecycle. It automatically generates code to remediate issues and applies the fix in the development pipeline. Accurics enables organizations of all sizes to achieve developer-driven cloud cyber resilience through cloud-based and open source tools such as Terrascan™.

    Learn more at www.accurics.com, on the Accurics blog, and on Twitter.

  • PagerDuty Hires Timm Hoyt VP of Global Partners and Alliances to Bolster Its Partner-First Sales Strategy

    Global tech veteran to head up partnership sales program that will drive growth and create new opportunities for PagerDuty and its partners

    San Francisco, CA, May 18, 2021 – PagerDuty, Inc. (NYSE:PD), a global leader in digital operations management, has hired industry veteran Timm Hoyt to lead its global partner and alliances organization. As vice president of partnerships, Hoyt will work directly with PagerDuty’s product and sales team to increase partnership-driven revenue.

    Hoyt comes to PagerDuty with a background in building go-to-market engines for a broad spectrum of global public and private tech companies, including organizations focused on data center infrastructure and SaaS. He joins the team from Druva where he was global vice president of partner sales. In this role he overhauled the company’s sales motion to become partner-first, increasing Druva’s partner revenue from 9% to over 80% – and becoming the company’s best way to win new customers.

    “PagerDuty sits at the center of the digital ecosystem and partnerships are critical as they allow our customers to integrate our platform with their entire digital operations, improving overall performance and working effectively across teams, no matter their preferred working tool,” said Dave Justice, chief revenue officer at PagerDuty. “Close to 14,000 organizations, including more than 60% of the Fortune 100, rely on PagerDuty’s ability to manage urgent, mission-critical work that is essential to keeping digital services always on. Moving to a partner-first model for growth will help us to continue to expand how we deliver value to customers – helping them increase revenue, lower costs and mitigate risks.”

    Hoyt brings extensive experience with driving success in global markets, including with sales, marketing and building partner organizations. He has worked for several years in EMEA, as well as Japan, South Korea and North America and Latin America. As part of his responsibilities, Hoyt will oversee partnership relations for five key pillars, including channel partners, cloud providers, ecosystem alliances, managed service providers and system integrators.

    “As companies move rapidly to digital first, PagerDuty is essential for helping businesses handle any urgent mission critical need right away,” said Hoyt. “I couldn’t be more excited to join PagerDuty to lead its partner organization and continue to empower and incentivize the partners in our ecosystem.”

    PagerDuty’s partner program brings a rich mix of solution, industry vertical and geographic expertise, including the likes of Buildkite, Gitlab, Jenkins and JFrog, to those looking to automate digital operations management. With more than 500 integrations, PagerDuty serves the unique and complex needs across DevOps, ITOps, CloudOps, AIOps, Customer Service, Security Operations, and Industrial Ops. Hoyt’s appointment follows other company milestones like the acquisition of Rundeck which enhances PagerDuty’s automation capabilities and the expansion of the partner program last summer for system integrators and managed service providers.

    For more information about PagerDuty and its partnership program, visit the website.

    About PagerDuty, Inc.

    PagerDuty, Inc. (NYSE:PD) is a leader in digital operations management. In an always-on world, organizations of all sizes trust PagerDuty to help them deliver a perfect digital experience to their customers, every time. Teams use PagerDuty to identify issues and opportunities in real time and bring together the right people to fix problems faster and prevent them in the future. Notable customers include GE, Cisco, Genentech, Electronic Arts, Cox Automotive, Netflix, Shopify, Zoom, DoorDash, Lululemon and more. To learn more and try PagerDuty for free, visit www.pagerduty.com. Follow our blog and connect with us on Twitter, LinkedIn, YouTube and Facebook.

  • LeanIX Combines SaaS Management and Enterprise Architecture to Help Drive Continuous Transformation

    As the use of SaaS in the enterprise explodes, LeanIX is the first Enterprise Architecture company to offer automated SaaS discovery and management to global customers

    Bonn, Germany and Boston, MA – May 18, 2021 – LeanIX (https://www.leanix.net/) the platform to plan and manage the Continuous Transformation journey, today introduces LeanIX SaaS Intelligence (SI), becoming the first Enterprise Architecture company to offer both Software-as-a-Service (SaaS) management and Application Portfolio Management (APM). IT leaders can now gain visibility and governance of all applications in use across the entire IT landscape, as SaaS increasingly plays a critical role in digital transformation initiatives.

    LeanIX will demonstrate its new offering to more than 1,000 IT professionals at EA Connect Day Americas 2021, a virtual event on Thursday, May 20, 2021. For more information and free registration, visit www.eaconnectdays.com.

    “Our work with CIOs and CTOs revealed that a secure and well-managed cloud architecture is crucial, and modern Application Portfolio Management must now include automated SaaS discovery and cataloging,” said André Christ, LeanIX CEO and co-founder. “SaaS now represents more than 50 percent of software investment for enterprises, and it continues to accelerate due to digital transformation and remote work. With our acquisition of Cleanshelf and the addition of LeanIX SaaS Intelligence, we are redefining how automatic and unified discovery for SaaS and Application Portfolio Management can accelerate the effectiveness of IT operations.”

    Whether Zoom, Slack or HubSpot, SaaS applications have become an indispensable part of the corporate world. Experts estimate the current SaaS market at more than 15,000 providers and counting. While SaaS brings flexibility, cost efficiency and scalability, its promise is in danger of turning into the opposite. With freemium and low-barrier product-led growth business models, SaaS providers now bypass traditional IT procurement processes. This independent access to licenses is now a growing challenge for finance and IT managers. Today, many companies know only half of their existing SaaS applications and accounts, resulting in rising and unclear costs, increasing security risks and compliance violations.

    LeanIX SaaS intelligence uses machine learning and the most integrations available on the market, more than 3,800, to automatically capture, analyze, and report all SaaS applications within the enterprise.  It automatically identifies unmanaged contracts, duplicate licenses and wasted cloud software subscriptions. For IT managers and finance teams, it provides SaaS discovery and cataloging, utilization and user engagement metrics, cost and subscription optimization, access, vendor management and security, and renewal management.

    LeanIX acquired Cleanshelf in March 2021. “The same vision unites us: we make companies capable of acting in the future with the right tools,” said Dusan Omercevic, founder of Cleanshelf and now VP Product/SaaS Intelligence for LeanIX. “With LeanIX, we have re-engineered SaaS management to meet the needs of some of the largest enterprises in the world, such as Adidas, Bosch, and Volkswagen. Now that we are part of the LeanIX family, our customers will receive the best product and technology offering in the industry.”

    LeanIX SaaS Intelligence will be available to companies as a standalone solution of the LeanIX Continuous Transformation Platform®. Cloud-native startups and scaleups will benefit from managing their SaaS applications just as much as large corporations with mature infrastructures. Enterprise architects will have the SaaS discovery and cataloging functionality available as a free component of the LeanIX Application Portfolio Management module in July 2021.

    “In the future, there will be no enterprise architecture management without automated support for managing SaaS applications,” said Christ. “We enable companies to make their IT landscape fully visible and easily manageable and thus establish smart governance – instead of erecting new barriers with restrictions. Independent access to software has positively changed the working world and accelerated processes. Companies need precisely this agility to be fit for the future – it’s part of the continuous transformation we’re seeing.”

    About LeanIX

    LeanIX’s Continuous Transformation Platform® is trusted by Corporate and Product IT for hundreds of enterprises that require comprehensive visibility and superior governance. Global customers organize, plan and manage IT landscapes with LeanIX’s automated and data-driven approach. Offering Enterprise Architecture – with SaaS-, Cloud- and DevOps Management, LeanIX helps organizations make sound decisions and allocate resources with complete confidence.  The company is headquartered in Bonn, Germany, with offices in Boston, San Francisco and around the world. For more information see www.leanix.net

  • Untangle Delivers Mobile IT Administrative Capabilities with Untangle Go

    Company’s first mobile app enables administrators to easily access their network and security status

    San Jose, CA, May 18, 2021 – Untangle® Inc, a leader in comprehensive network security for small-to-medium businesses (SMBs) and distributed enterprises, today announced the release of Untangle Go, the company’s first mobile app. Untangle Go, which has been released today on iOS and Android, empowers IT administrators to quickly access critical information regarding their security appliances and network status.

    SMBs are increasingly asked to do more with less, with 38% of SMBs allocating $1,000 or less to their IT security budget. Keeping IT professionals within budget, informed, while offering an easy-to-navigate, mobile-optimized view of core network details, Untangle Go increases efficiency by enabling administrators to access high-level network health metrics. Untangle Go extends the reach of Untangle Command Center, enhancing centralized management – a core aspect of the Untangle Network Security Framework. Available for free on iOS and Google Play, Untangle Go aims to bring IT administrators peace of mind regarding their network and security status, regardless of their physical location or access to a computer.

    “Untangle is pleased to be able to offer our partners a new tool to make their days easier,” said Heather Paunet, Senior Vice President of Product & Marketing at Untangle. “Wherever they are, an administrator can now quickly check-in on the status of all the networks they manage, right from their mobile phone, and ensure that everything is running as expected.”

    As employees transition back into the office, administrators will be faced with new challenges that will require them to spend more time away from their desks making in-person office visits. In line with the Untangle ethos of meeting user needs to excel in customer service, Untangle Go is designed to ease those transitional periods and ensure that IT admins can always connect when needed. Untangle Go reaffirms the company’s commitment to deliver IT administrators the information they need, when they need it, all while fitting tight budgets.

    To learn more about Untangle Go, click here.

    About Untangle

    Untangle is an innovator in networking and cybersecurity designed specifically for the below-enterprise market, safeguarding businesses, home offices, nonprofits, schools and governmental organizations. Untangle’s integrated suite of software and appliances provides enterprise-grade capabilities and consumer-oriented simplicity to organizations with limited IT resources. Untangle’s award-winning network security solutions are trusted by over 40,000 customers around the world. Untangle is headquartered in San Jose, California.

  • Arctic Wolf Revolutionizes Security Awareness and Training with New Managed Security Awareness Solution

    Eden Prairie, MN, May 18, 2021 — Arctic Wolf®, the leader in security operations, today announced the launch of Arctic Wolf Managed Security Awareness®, a radical new approach to security and awareness training that helps organizations build cyber resilience against social engineering, phishing attacks, and credential theft.

    Arctic Wolf is the first managed detection and response (MDR) vendor to offer a comprehensive, fully managed, security awareness solution natively from its security operations-focused Arctic Wolf® Platform. This launch augments the powerful combination of technology and concierge services that Arctic Wolf pioneered in the industry to end cyber risk. According to the 2021 Verizon Data Breach Investigations Report, 85 percent of all incidents involve some form of human element, dominated by phishing and credential theft. Organizations looking to improve their security posture and minimize cyber risk have an acute and growing need to implement programs that address their exposure to social engineering attacks.

    Arctic Wolf’s innovative new offering is uniquely positioned to help customers in that journey because it combines fully managed security awareness training, phishing simulations, and account takeover monitoring in a solution that is delivered as a concierge service. This makes it fast and easy for security teams, even those without an IT or cybersecurity function, to add a security awareness and training program and receive this critical level of protection.

    Pioneering a New Approach to Cyber Resilience Through a Fully Managed Security Awareness Service

    Security awareness training is a core pillar of security operations, but traditional training solutions that operate on an annual cadence and offer a “check the box” approach to compliance are wildly ineffective, leaving employees unengaged and uninformed about the latest attacks targeting them. With Arctic Wolf observing a 64% increase in phishing and ransomware attacks in the second quarter of last year, it’s clear that attackers will continue to leverage social engineering to achieve their objectives. In addition, according to the latest reports, last year alone 31 billion data records have been compromised, making it extremely easy for attackers to find legitimate credentials and then use them to bypass security controls. To address both of these risks, Arctic Wolf Managed Security Awareness uses training and phishing simulations to reduce the likelihood of an incident, and also includes 24×7 account takeover monitoring to enable rapid response and reduce the impact if credentials are exposed.

    Arctic Wolf Managed Security Awareness also helps customers build organizational resilience with automated phishing simulations and ongoing microlearning, which if applied as an ongoing program, are proven to result in a 70% decrease in clicks on phishing simulations. Customers benefit from the unrivalled experience of their Arctic Wolf Concierge Security® Team, security experts who protect thousands of customers worldwide and are uniquely capable of identifying malicious activity first-hand. With this approach, organizations can tap into Arctic Wolf’s deep security expertise to launch a world-class security awareness program in a matter of days, receiving immediate time-to-value.

    Fueling a Growing Market Demand for Security Awareness and Training

    Gartner1 predicts that “by 2024, 25% of midsize enterprises will adopt security awareness training as a managed service, up from less than 5% today,” and they make the recommendation that organizations should “evaluate security awareness training as a managed service if there is a gap in security awareness expertise on staff, or if other budgetary, financial or program-driven constraints exist.”

    “Delivered with the speed, customization, and usability that customers are accustomed to from the Arctic Wolf Platform, the Managed Security Awareness service is strongly positioned to fuel the security awareness and training market and quickly become the go-to solution for organizations,” said Nick Schneider, president of Arctic Wolf. “Our unique and automated approach ensures progress over time, while the ongoing engagement from the Concierge Security Team keeps organizations informed about their risk exposure and offers actionable strategies to minimize it.”

    Delivering value beyond traditional training solutions, Arctic Wolf Managed Security Awareness includes the following components:

    • Security Awareness Microlearning: Prepare employees to stop social engineering attacks with continuous training to recognize current threats, avoid scams, and understand the importance of reporting mistakes
    • Automated Phishing Simulations and Immediate Education: Measure and reinforce employee awareness with automated assessments and phishing simulations based on real-life attacks
    • Account Takeover Monitoring: Minimize the risk of account takeovers with immediate notification when employee credentials are found on the dark web
    • Turnkey Content Delivery: Engage employees by deploying timely content with high production value, along with a vision to build academic-level programmatic rigor

    In addition to Managed Security Awareness, Arctic Wolf security operations solutions include Arctic Wolf® Managed Detection and Response (MDR), Managed Risk, and Managed Cloud Monitoring—each delivered by the industry’s original Concierge Security Team. The highly trained Concierge Security experts work as an extension of internal teams to provide 24×7 monitoring, detection, and response, as well as ongoing risk management to proactively protect organizations while continually strengthening their security posture.

    To learn more about Arctic Wolf Managed Security Awareness:

    Supporting Quotes:

    “While there are many training and awareness programs in the industry, no other company captures Arctic Wolf’s effectiveness through microlearning and the holistic approach they bring,” said Jon Armstrong, director of IT & Security, Fullsteam. “Delivered with the ease-of-use that we are accustomed to from the Arctic Wolf Platform, the Managed Security Awareness solution will be a critical component of our overall risk mitigation strategy.”

    “Arctic Wolf is an indispensable partner that allows us to offer our customers a comprehensive platform to advance their security operations,” said Marquis Suber, managing consultant, k_Street Consulting. “We are seeing increased demand for security awareness solutions from our customers and believe Arctic Wolf Managed Security Awareness will quickly become the go-to market solution for companies looking to harden their overall security posture.”

    Company Resources:

    Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

    About Arctic Wolf:

    Arctic Wolf® is the market leader in security operations, pioneering the first cloud-native security operations platform to end cyber risk. Leading the industry with threat telemetry from endpoint, network, and cloud sources, the Arctic Wolf® Platform, supported by the original Concierge Security® team is the last line of defense for thousands of organizations worldwide. The Arctic Wolf Platform and Concierge Security experts make it fast and easy for organizations of any size to stand up world-class security operations that continually guard against attacks in an efficient and sustainable way.

    For more information about Arctic Wolf, visit arcticwolf.com or follow us at @AWNetworks, on LinkedIn or Facebook.

    © 2021 Arctic Wolf Networks, Inc., All Rights Reserved. Arctic Wolf, Arctic Wolf Platform, Arctic Wolf Managed Detection and Response, Arctic Wolf Managed Risk, Arctic Wolf Managed Cloud Monitoring, Arctic Wolf Managed Security Awareness, and Arctic Wolf Concierge Security Team are either trademarks or registered trademarks of Arctic Wolf Networks, Inc. or Arctic Wolf Networks Canada, Inc. and any subsidiaries in Canada, the United States, and/or other countries.

  • LinearB Launches ‘Dev Interrupted’ Community to Help Software Engineering Leaders Continuously Improve

    Engineering leaders from GitHub, Netflix, and Honeycomb join the Dev Interrupted community event on May 20 to discuss Continuous Improvement

    Los Angeles, CA and Tel Aviv, Israel, May 18, 2021 — LinearB, the team behind Software Delivery Intelligence, has launched the “Dev Interrupted” community, which consists of a Discord community, podcast, newsletter, and events (https://www.DevInterrupted.com). As an engineering leadership community with over 1,000 discord members, Dev Interrupted brings the most forward thinking minds together to establish the future of daily continuous improvement for software development teams.

    Dev Interrupted presents new ideas by the world’s most innovative engineering leaders at community events each month. On May 20 at 12noon PT, Dana Lawson, VP of Engineering at GitHub, Kathryn Koehler, Director of Productivity Engineering at Netflix, and Charity Majors, CTO of Honeycomb, join the Dev Interrupted community for a livestream watch party focused on creating daily improvement in engineering organizations.

    Sign-up for the event at https://linearb.io/continuous-improvement-leaders/

    “Dev Interrupted is a place to promote organic, forward-thinking ideas from the new faces of software engineering leadership.” said Dan Lines, co-founder of LinearB  and host of the Dev Interrupted podcast. “It is not just a LinearB user community. We believe in creating a space that engineering leaders can come together, share ideas, have a bit of fun and have something tangible to take back and share with their teams.”

    Dev Interrupted is led by community moderators that facilitate daily interactions in Discord. Discord is an anonymous chat-based community that allows openness, vulnerability and honesty between leadership peers. These unfiltered, organic discussions are valuable to the community for creating relationships and pushing new ideas forward. The Dev Interrupted Discord is a place where engineering leaders from around the world can connect on topics ranging from team culture, hiring, leadership and metrics.

    Join Dev Interrupted Discord at https://discord.com/invite/AMdYuhxkJV

    Dev Interrupted uses community-driven conversation as the focus of their podcasts, articles, and discussions. Several members from the Discord community also join Dan Lines on the popular Dev Interrupted podcast. Recent guests include:

    • Eric Johnson, CTO at GitLab
    • Ian Nowland, SVP of Core Engineering at Datadog
    • John Willis, Senior Director Global Transformation Office at Red Hat
    • Cate Huston, Engineering Director at DuckDuckGo
    • Anders Wallgren, VP of Technology Strategy at Cloudbees
    • Spiros Xanthos, VP of Product Management, Observability & IT Ops at Splunk

    Subscribe and listen to the Dev Interrupted Podcast on Spotify at https://open.spotify.com/show/7icMkauSvLflWCpQrfafIv

    About LinearB

    Metrics alone don’t improve dev teams. Software Delivery Intelligence (SDI) helps dev teams continuously improve by turning insight into action. Unlike top-down engineering metrics tools which become shelf-ware, LinearB is a dev-first platform and provides value to every member of the team. Development organizations using LinearB’s SDI cut their Cycle Time in half after only 90 days. The result for developers is less bureaucracy, fewer interruptions and more time to build. The result for teams is fewer process bottlenecks and accelerated delivery. Activate Software Delivery Intelligence for your dev team in 5 minutes at linearb.io.

  • Qualys Introduces Cybersecurity Asset Management

    New asset inventory app helps security teams identify and respond to gaps in their security and compliance program

    Foster City, CA, May 18, 2021 — Qualys, Inc. (NASDAQ: QLYS), a pioneer and leading provider of disruptive cloud-based IT, security and compliance solutions, today announced CyberSecurity Asset Management (CSAM), built on the Qualys Cloud Platform, to inventory the complete IT ecosystem, detect security gaps and respond to the risk, all from a unified platform.

    Over the past year, organizations have rapidly accelerated their digital transformation by leveraging technologies such as cloud and container that support the shift to IoT and a remote workforce. This digital shift calls for a new approach to asset visibility since traditional asset administration responsibilities like inventory, software support and license oversight are the purview of IT and addressed with IT inventory-focused tools. Security teams need to monitor IT asset health from a cybersecurity perspective by detecting security tool blind spots and responding to exposures quickly.

    “As an organization focused on Security Operations, we believe that ‘you can’t protect what you don’t understand,’ with understand being the key word. Hence, asset management in the security operations context isn’t just ‘seeing’ an asset; it is having the right ‘risk’ context of each and every software, hardware and IoT asset at our fingertips,” said Jatinder Pal Singh, director of security operations at Informatica. “Our SOC asset management leverages the Qualys CyberSecurity Asset Management app to not only provide the visibility we need, but it goes a step further and assesses every asset’s security risk, enabling our SOC to not only get relevant alerts but enable the IR analyst to take appropriate and timely actions.”

    CyberSecurity Asset Management is an all-in-one solution that leverages the power of the Qualys Cloud Platform with its multiple native sensors and CMDB synchronization to continuously inventory known and unknown assets, discover installed applications, and overlay business and risk context to establish asset criticality. It identifies unauthorized or end-of-life and end-of-service software, the absence of required security tools, and assesses the health of the attack surface. Further, CSAM enables response options with threat alerts and software removal and delivers regulatory reporting in support of FedRAMP, PCI-DSS and other mandates. 

    “CSAM is more than a list of IT assets, as it leverages vital context from the Qualys Cloud Platform to identify, consolidate and prioritize critical assets. The platform, in turn, provides the orchestration needed for the security team to take swift action to mitigate risk while eliminating the need to pass reports back and forth between IT and security. By providing a platform-based approach to the challenge of asset security response, Qualys is helping to distinguish itself in this market,” noted Tanner Johnson, principal analyst at Omdia.

     Qualys CSAM is purpose-built for security teams. It is supported by the same Qualys sensors and multi-function cloud agent used for vulnerability management, patching, compliance, file integrity monitoring and endpoint detection and response. CSAM enables orgs to:

     Build a Comprehensive Up-to-Date Asset Inventory (Free Global AssetView app) – Leverage multiple native Qualys sensors to collect and correlate asset data using agentless technology, cloud agents and APIs to see an accurate inventory of managed and unmanaged assets. Auto-classify assets by category across IT, cloud and IoT environments for a single structured view of your IT infrastructure.

    Sync with CMDB and Assign Risk Profile – Use the ServiceNow CMDB sync app or Qualys Asset APIs for two-way synchronization of attributes and business context. Auto-tag assets and assign risk criticality based on asset and ownership information. CSAM helps maintain your CMDB as a single source of truth for your IT and security teams.

    Detect and Monitor Security Gaps – Detect unauthorized assets connecting to the network. Monitor assets for installed, unauthorized software, identify assets that lack required security tools and track externally exposed assets allowing security teams to eliminate inventory blind spots and mitigate risk. 

    Alert, Report and Respond – Alert security teams as soon as asset health is impacted to avoid potential compliance issues. Create asset health status reports for auditors with out-of-box templates for mandates like PCI, FedRAMP, etc. Quickly take manual or automatic response actions by uninstalling unauthorized software using the cloud agent to eliminate potential issues.

     “We’ve built upon our popular free Global AssetView app, which provides customers with insights on millions of devices, to reimagine asset management for security teams, so they have a clear picture of the security context of assets,” said Sumedh Thakar, president and CEO of Qualys. “CSAM uses telemetry from multiple sensors including the Qualys Cloud Agent to bring security teams the automation they need to identify and manage the gaps in their IT asset inventory.”

    AssetView Live, June 2

    Join us for AssetView Live  to see Qualys CSAM in action on June 2 where you will hear from customers and see a live demo of the app. Register at qualys.com/assetviewlive.

    Availability

    Qualys Cybersecurity Asset Management will be available in June. If you would like to sign up for the free trial waiting list, qualys.com/CSAM-trial

    Additional Resources 

    About Qualys
    Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security and compliance solutions with over 19,000 active customers in more than 130 countries, including a majority of each of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and consolidate their security and compliance solutions in a single platform and build security into digital transformation initiatives for greater agility, better business outcomes, and substantial cost savings.

    The Qualys Cloud Platform and its integrated Cloud apps deliver businesses critical security intelligence continuously, enabling them to automate the full spectrum of auditing, compliance, and protection for IT systems and web applications across on premises, endpoints, cloud, containers, and mobile environments. Founded in 1999 as one of the first SaaS security companies, Qualys has established strategic partnerships with leading cloud providers like Amazon Web Services, Microsoft Azure and the Google Cloud Platform, and managed service providers and consulting organizations including Accenture, BT, Cognizant Technology Solutions, Deutsche Telekom, DXC Technology, Fujitsu, HCL Technologies, IBM, Infosys, NTT, Optiv, SecureWorks, Tata Communications, Verizon and Wipro. The company is also a founding member of the Cloud Security Alliance. For more information, please visit www.qualys.com. 

    Qualys and the Qualys logo are proprietary trademarks of Qualys, Inc. All other products or names may be trademarks of their respective companies.