devopsy.kinsta.cloud

Tag: threat stack

  • Threat Stack Speeds Up Cloud Security Operations with New Alert Tagging and Daily Vulnerability Management Reporting

    Only cloud security provider to offer alert tags to accelerate incident resolution; Daily vulnerability reporting including Amazon Machine Images (AMI) IDs

    BOSTON – June 16, 2016 – Threat Stack, a leader in cloud security and compliance management, today announced feature enhancements designed to speed up security team velocity and improve efficiency with new alert tags and vulnerability management reporting capabilities of the Threat Stack Cloud Security Platform™ (CSP). Threat Stack CSP alert tags and vulnerability reporting provides security and operations users with previously unattainable, in-depth context about AWS instances, improves security incident response and allows organizations to easily track and manage vulnerabilities with detailed, easy-to-follow daily reports.

    “Both alert tags and vulnerability reports are features that enable customers to get even more visibility into what is happening on each server, across the infrastructure, saving hours of investigation during critical events or in depth audits,” said Venkat Pothamsetty, vice president of products and customer advocacy, Threat Stack. “We continue to work tirelessly to deliver features and enhancements that help to securely increase security and ops efficiency and productivity.”

    Threat Stack’s alert tags integrate host data alerts with infrastructure tag information to provide detailed server-specific context to each alert. By clicking on a tag, users can now easily see the process details and cloud context behind each alert, including identifying the user that may have been involved. Typically, this level of detail is only attainable through hours spent manually reviewing logs. By automatically identifying which server the alert is related to, these tags enable security engineers to resolve the issue in minutes instead of hours. Over time, these alerts will provide even more context as the CSP scours increasing amounts of data.

    Daily vulnerability reporting from Threat Stack gives users a comprehensive breakdown of system-wide vulnerabilities including Amazon Machine Images (AMI) ID’s for Amazon EC2 users, not commonly available in traditional vulnerability reports. This level of reporting not only provides details on remedial actions or Common Vulnerabilities and Exposures (CVE) management, but also creates a record to demonstrate daily vulnerability management in case of an audit.

    “Threat Stack provides an unmatched level of security and visibility across our infrastructure,” said Jon Debonis, VP of Information Security/CISO, Blend Labs. “Using one single dashboard, we always know who is doing what on our machines saving us hours of investigation and reducing our time to resolution.”

    Both features are now immediately available to all Threat Stack users. For more information on Threat Stack, please visithttps://threatstack.com.

    About Threat Stack

    Threat Stack enables growth-driven companies to scale with confidence by identifying and verifying insider threats, external attacks and data loss in real-time. The only fully integrated, cloud-native continuous monitoring solution that gives customers instant visibility and automatically responds to changes in their environment, Threat Stack provides the coverage needed to run secure and compliant, in all environments, without sacrificing speed and efficiency. For more information, or to start a free trial, visit threatstack.com.

     

  • SessionM Selects the Threat Stack Cloud Security Platform TM for Visibility into Rapidly–Expanding Cloud Environment

    BOSTON – April 28, 2016 – Threat Stack, a leader in cloud security and compliance management, announced today that SessionM, pioneers in mobile marketing cloud technology, selected the Threat Stack Cloud Security PlatformTM (CSP) to secure and protect the company’s cloud-based customer relationship management (CRM) and engagement platform.

    SessionM chose Threat Stack’s cloud-native, fully integrated security platform to achieve real-time workload visibility across its cloud infrastructure and to protect against threats and data loss. With Threat Stack’s “trust but verify” approach to cloud security, SessionM can confidently provide production access to development teams with complete visibility to better identify risky user error or activity. By enabling SessionM’s secure-but-fast approach to development, Threat Stack is helping the company to continue to support its rapidly growing customer base, which includes several category-leading Fortune 500 clients.

    “We had reached a point in the growth of SessionM where we knew that we needed a cloud security solution that would not only make our operation more secure, but would not slow us down as we continue to develop our cloud-based services,” said Scott Weller, CTO, SessionM. “Threat Stack has delivered in every capacity straight out of the gate, and we’re continually seeing the benefits from the visibility and security that Threat Stack provides us.”

     

    The SessionM team has also benefited from Threat Stack’s webhook integration with group and private chat service, HipChat. By extending security across this platform, the company is further able to gain insight and act swiftly and collaboratively when issues or alerts occur.

     

    “We are thrilled that SessionM chose Threat Stack as its partner in securing and supporting its cloud environment and rapidly growing customer base,” said Brian M. Ahern, chairman and CEO, Threat Stack. “We purpose-built the Threat Stack Cloud Security Platform to enable cloud-centric companies like SessionM who need to scale quickly, remain secure and compliant at the same time.”

     

    Threat Stack’s Cloud Security Platform supports security insight across all environments, cloud security providers and containers, eliminating the need for fragmented solutions and reducing the complexity of security concerns facing IT leaders and CISOs. With integrated security data from all aspects of the cloud environment, customers achieve a faster time to resolution and an overall lower total cost of ownership. Threat Stack’s CSP is used by companies in the healthcare, fintech and SaaS sectors, among others.

    For more information on Threat Stack, please visit https://threatstack.com.

     

    About Threat Stack

    Threat Stack enables growth-driven companies to scale with confidence by identifying and verifying insider threats, external attacks and data loss in real-time. The only fully integrated, cloud-native continuous monitoring solution that gives customers instant visibility and automatically responds to changes in their environment, Threat Stack provides the coverage needed to run secure and compliant, in all environments, without sacrificing speed and efficiency. For more information, or to start a free trial, visit threatstack.com.

     

    Allison Stokes, Account Director, fama PR

    o: 617-986-5010 m: 617-697-9450 f: 617-848-9922

    Skype: allisonstokes      Twitter: @stokestvb

    Liberty Wharf, 250 Northern Avenue, Suite 300, Boston, MA 02210

  • Threat Stack Secures $15.3 Million in Series B Funding to Drive More Efficiency for Cloud Security Teams

     

    Scale Venture Partners Leads Round; Market Demand and Rapid Customer Growth Key to Series B Funding Round

    BOSTON – April 19, 2016 – Threat Stack, a leader in cloud security and compliance management, today announced it secured $15.3 million in Series B funding, led by Scale Venture Partners (Scale), with participation from all existing investors, including Accomplice and .406 Ventures. Threat Stack today also announced that Ariel Tseitlin, a partner at Scale, will join the company’s board of directors. The latest round of funding brings total investment in Threat Stack to more than $26 million.

    Threat Stack Series B funding comes on the heels of the company’s record year of customer growth in 2015 and the launch of the Threat Stack Cloud Security Platform™ (CSP) in early 2016. The new capital will be used to double headcount in the next year, bolstering sales, marketing and engineering to further enhance product capabilities and user experience. Threat Stack will also use funding to support expansion into a new Boston headquarters in the coming months.

    “We are thrilled to bring Threat Stack into our strong portfolio of cloud businesses. Threat Stack’s rapid quarter-over-quarter growth and industry-leading approach to cloud security made this a compelling investment for us. There is a big gap in the security needs of cloud-native application and the capabilities of security tools in the market, and Threat Stack fills that gap with a unique product that’s easy to use and scale,” said Tseitlin. “I look forward to Threat Stack’s further expansion in the market as enterprises of all sizes continue to build rapidly and securely in the cloud.”

    “Threat Stack’s Cloud Security Platform has enabled us to grow faster by replacing point tools and using security resources dedicated to our cloud environment more efficiently,” said Jarrod Sexton, senior security engineer for Interactive Intelligence. “By enabling us to more quickly and cost-effectively identify and resolve security issues, Threat Stack has proven to be an invaluable partner.”

    The cloud-native, fully-integrated Threat Stack Cloud Security Platform supports security insight across all environments, cloud security providers and containers, eliminating the need for fragmented solutions and reducing the complexity of security concerns facing IT leaders and CISOs. With integrated security data from all aspects of the cloud environment, customers achieve a faster time to resolution and an overall lower total cost of ownership. Threat Stack’s CSP is used by companies in the healthcare, fintech and SaaS sectors, among others.

    “Since I joined Threat Stack a year ago, we’ve experienced incredible business momentum. Our growth is not only across our customer base but also as a team working passionately to build a security and compliance solution that meets the growing needs of modern cloud infrastructure,” said Brian M. Ahern, chairman and CEO, Threat Stack. “This latest round of funding validates our approach to the market, and will fuel further enhancement of Threat Stack’s Cloud Security Platform to improve operational efficiency, while resolving security and compliance challenges for customers across all industries.”

    Today’s fastest growing companies are relying on modern cloud infrastructure to fuel speed to market, innovation and scale. Resources are at a premium while security risk is greater than ever. According to a recent Enterprise Strategy Group (ESG) survey of cyber security and IT professionals,“34 percent said their organization finds it challenging to monitor workloads across clouds. This could be related to workloads within hybrid clouds, or it could indicate monitoring challenges with workloads across heterogeneous private or public cloud infrastructure.”

    For more information on Threat Stack, please visit https://threatstack.com.

    About Threat Stack

    Threat Stack enables growth-driven companies to scale with confidence by identifying and verifying insider threats, external attacks and data loss in real-time. The only fully integrated, cloud-native continuous monitoring solution that gives customers instant visibility and automatically responds to changes in their environment, Threat Stack provides the coverage needed to run secure and compliant, in all environments, without sacrificing speed and efficiency. For more information, or to start a free trial, visit threatstack.com.

     

  • Threat Stack Announces Webhook API Integration Capabilities

    Customized Workflows Enable Collaboration to Streamline Security 

    BOSTON – April 14, 2016 – Threat Stack, a leader in cloud security management and compliance, today announced its webhook API integration capabilities to reduce security and operations workflow challenges. This capability allows Threat Stack customers to enable a webhook API to build custom workflows based on security alerts. These custom workflows extend the Threat Stack Cloud Security PlatformTM (CSP) and help customers to further integrate security into their existing monitoring operations.

    Security concerns continue to be a challenge for IT leaders and CISOs facing increased threats daily. It is more important than ever that departments within organizations collaborate to streamline and automate processes. Threat Stack’s webhook API integration makes it easier for security and operations teams to automatically trigger alerts and remediation to speed time to resolution.

    “In cloud environments, automation is key when it comes to monitoring for and resolving incidents. Threat Stack’s webhook API integration takes automation past a simple alert and actually quarantines the instance until it can be addressed,” said Venkat Pothamsetty, vice president of products and customer advocacy at Threat Stack. “These types of capabilities have a measurable impact on internal team efficiency and is one of the many ways that Threat Stack has developed automation to improve time to resolution.”

    Threat Stack customers using webhooks can now more easily and efficiently:

    • Integrate the Threat Stack Cloud Security Platform with custom internal applications
    • Integrate with other monitoring platforms to more easily identify issues
    •   Build new escalation and/or remediation workflows based on Threat Stack alerts

    Threat Stack users can custom configure their own webhook integrations to subscribe to specific, prioritized events. When an event is triggered, the webhooks integration sends a summary of alert information in JavaScript Object Notation (JSON) format, and every alert results in a separate call to the webhooks API. Users are then able to interpret their alerts and take actions based on their unique needs.

    Examples of custom workflows for cloud security teams include:

    • Generating a custom AWS Simple Notification Service (SNS) notification based on severity 1 Threat Stack alerts
    • Creating a Jira ticket from a severity 2 Threat Stack alert
    • Archive severity 3 Threat Stack alerts into a S3 bucket for long-term storage

    The cloud native, fully-integrated Threat Stack webhook API integration enables collaboration to drive faster mean time to resolution of critical security events. Threat Stack customers across healthcare, fintech, SaaS fields, and other industries benefit from greater efficiency, streamlined services, and the automated integration of security events from across the infrastructure.

    For more information on Threat Stack, please visit www.threatstack.com.

    About Threat Stack

    Threat Stack enables growth-driven companies to scale with confidence by identifying and verifying insider threats, external attacks and data loss in real-time. The only fully integrated, cloud-native continuous monitoring solution that gives customers instant visibility and automatically responds to changes in their environment, Threat Stack provides the coverage needed to run secure and compliant, in all environments, without sacrificing speed and efficiency. For more information, or to start a free trial, visit threatstack.com.

  • Threat Stack Cloud Security Platform™ Achieves AWS Security Competency

    Threat Stack Earns Competency for Comprehensive Security and Seamless Customer Experience

    BOSTON – April 7, 2016 – Threat Stack, a leader in cloud security management and compliance, today announced that it has achieved the Amazon Web Services (AWS) Security Competency as part of the AWS Competency Program for the Threat Stack Cloud Security PlatformTM(CSP).

    “Security starts with visibility and Threat Stack offers unparalleled visibility across our systems and cloud infrastructure,” said Chris Haag, Director of Engineering, Agari. “The Threat Stack Cloud Security Platform offers both intelligent anomaly detection and a highly flexible rules engine to detect suspicious behaviors such as privilege escalation, data exfiltration and unusual network activity.”

    The AWS Competency Program is designed to highlight members of the AWS Partner Network (APN) who have demonstrated technical proficiency and proven customer success in specialized solution areas such as Security. The Threat Stack Cloud Security Platform™ attained security competency based on proven success in building products and solutions on AWS to support customers in the area of configuration and vulnerability analysis.

    “We strongly believe that a layered approach to cloud security is best, which makes Threat Stack CSP an essential complement to AWS,” said Brian Ahern, chairman and CEO, Threat Stack. “Threat Stack provides the deep visibility needed to identify insider threats and intrusions, prevent data loss and meet compliance regulations when building and running on AWS. Achieving AWS Security Competency Partner recognition demonstrates our commitment to protecting customers’ workload and broader environment from threats.”

    Threat Stack CSP is an industry leading, fully integrated cloud security suite. Cloud-native and platform-independent, Threat Stack CSP measurably reduces the expense and complexity required to identify threats, keep data protected and automate compliance requirements. Threat Stack CSP offers instant visibility and deep correlated context that enables companies to operate efficiently, prevent data loss and identify and verify threats.

    About Threat Stack

    Threat Stack enables growth-driven companies to scale with confidence by identifying and verifying insider threats, external attacks and data loss in real-time. The only fully integrated, cloud-native continuous monitoring solution that gives companies instant visibility and automatically responds to changes in their environment, Threat Stack provides the coverage needed to run secure and compliant, in all environments, without sacrificing speed and efficiency. For more information, or to start a free trial, visit threatstack.com.

     

  • Threat Stack Announces Most Comprehensive Cloud Security Vulnerability Verification

    Cloud Security Platform™ Provides Automated CVE Check Against Every Package Installed

    BOSTON– March 30, 2016 – Threat Stack, a leader in cloud security management and compliance, today announced advanced capabilities in the Threat Stack Cloud Security PlatformTM that provide customers with the most comprehensive vulnerability verification of any cloud security offering currently on the market. Threat Stack’s Cloud Security Platform automatically analyzes all customer packages against the more than 2 million Common Vulnerabilities and Exposures (CVE) listed in the National Vulnerability Database (NVD) run by the National Institute of Standards and Technology (NIST).

    “Threat Stack wants to keep customers as current as possible on critical CVEs,” said Venkat Pothamsetty, vice president of products and customer advocacy, Threat Stack. “The Threat Stack Cloud Security Platform compares every single CVE published to every package installed, cross-checks against all corresponding vendor advisories on those packages and pin points to the image ID that the servers are instantiated from. The extensive and platform approach we take is resulting in the least false positive rate of CVEs in the industry, but also directly helping with workflows by pointing out what AMI needs to be updated.”

     

    Security and operations teams operating in the cloud are challenged with assuring security, eliminating vulnerabilities and running as fast as possible. Operations teams, in particular, need to quickly identify packages with vulnerabilities before they’re rolled out into the infrastructure.

    Understanding the growing importance of vulnerability management to cloud users, Threat Stack has assured that the cloud-native platform automatically examines package information on the workload, checking against the NVD. The cloud service also provides manual, custom updates; cross references with operating systems vendors; and proactively directs customers to which AMI needs to be updated.

     

    The cloud native, fully-integrated Threat Stack Cloud Security Platform supports data across all environments, cloud security providers and containers, eliminating the need for fragmented solutions and reducing the complexity of security concerns facing IT leaders and CIOs. By providing vulnerability management at the workload layer, Threat Stack gives customers the confidence they’re managing CVEs efficiently, enabling them to focus on more high-priority security threats.

    To learn more about Threat Stack’s vulnerability management capabilities, please visit the Threat Stack blog.

    About Threat Stack

    Threat Stack enables growth-driven companies to scale with confidence by identifying and verifying insider threats, external attacks and data loss in real-time. The only fully integrated, cloud-native continuous monitoring solution that gives customers instant visibility and automatically responds to changes in their environment, Threat Stack provides the coverage needed to run secure and compliant, in all environments, without sacrificing speed and efficiency. For more information, or to start a free trial, visit threatstack.com.

  • PagerDuty Selects Threat Stack to Enable High-Velocity Security and Compliance in the Cloud

    Threat Stack’s Continuous Security Monitoring Helps Assure Security and Scalability

    BOSTON– March 16, 2016 – Threat Stack, a leader in cloud security management and compliance, today announced that PagerDuty, the pioneer in agile incident management, selected Threat Stack Cloud Security PlatformTM to protect and secure its rapidly growing infrastructure within its Amazon Web Services (AWS) environment. PagerDuty’s decision to adopt Threat Stack was driven by its need for continuous security monitoring and complete visibility into its users, data, and expanding AWS and Microsoft Azure infrastructure.

     

    “As a rapidly growing organization committed to delivering reliability and uptime, it’s critical that we leverage the scalability and flexibility of the cloud, while keeping our resources safe and secure,” said Arup Chakrabarti, Director of Infrastructure Engineering at PagerDuty. “Not only is Threat Stack easy to deploy, it’s also easy to integrate with both new and existing tools. We now have complete visibility into our processes and activities for continuous monitoring and security management across our environment.”

     

    The PagerDuty platform allows IT Ops and DevOps teams to manage and respond to incidents quickly and efficiently, reducing the chance of outages or setbacks of any kind. Threat Stack’s continuous, real-time security monitoring helps the PagerDuty team to quickly identify top-level threats, streamline processes within the operation’s workflow and increase security across the organization.

     

    “We are longtime fans of PagerDuty, and are excited to partner with them to deliver granular, integrated visibility into user activity, processes, files and network connections,” said Venkat Pothamsetty, Vice President, Products and Customer Advocacy at Threat Stack. “We are proud to deepen this relationship by helping PagerDuty scale their cloud-based business while keeping them secure and compliant.”

     

    PagerDuty is using Threat Stack Cloud Security Platform’s full suite of features and special integrations across its AWS environment to provide host-level visibility and other key capabilities including:

    • Autoscaling: Threat Stack’s cloud-native architecture automatically scales up or down with the capacity of PagerDuty’s AWS and Microsoft Azure infrastructure to ensure continuous visibility across its dynamic environment.

     

    • Insider Threat Identification: Continuous monitoring for unauthorized actions, such as escalation of user privileges, unauthorized installs, new users added/deleted, suspicious commands, anomalous behavior, changes to security groups, user session information and process stops.

     

    • External Attacks Early Warning: Automatic detection of abnormal login attempts/failures, wide open security groups, launches of new processes or kernel modules, user session information, process stops, external connections for command and control.

     

    • Data Security Verification: Automated access, editing or copying of customer or personal data intellectual property, as well as internal configuration, passwords, certificates and keys.

     

    • Compliance Reporting: Real-time visibility, detailed audit trails and built-in compliance reporting provide the historical record needed to meet compliance regulations and ensure data and infrastructure are protected.

     

    To learn more about how PagerDuty uses Threat Stack, please visit the Threat Stack blog.

    About Threat Stack

    Threat Stack enables growth-driven companies to scale with confidence by identifying and verifying insider threats, external attacks and data loss in real-time. The only fully integrated, cloud-native continuous monitoring solution that gives customers instant visibility and automatically responds to changes in their environment, Threat Stack provides the coverage needed to run secure and compliant, in all environments, without sacrificing speed and efficiency. For more information, or to start a free trial, visit threatstack.com.

    About PagerDuty

    PagerDuty is an agile incident management solution that integrates with IT Ops and DevOps monitoring stacks to improve operational reliability and agility. From enriching and aggregating events to correlating them into actionable alerts, PagerDuty streamlines the incident management lifecycle by reducing noise and resolution times. With hundreds of native integrations with operations tools, automated scheduling, advance reporting and guaranteed availability, PagerDuty is trusted by over 7,000 organizations globally to increase business and employee efficiency. The company is headquartered in San Francisco and backed by leading venture capital firms Andreessen Horowitz, Bessemer Venture Partners, Baseline Ventures, Ignition Partners and others. To try PagerDuty for free, or to get more information, visit www.pagerduty.com

    Media Contact

    Ashley Crutchfield

    fama PR for Threat Stack

    (617) 986-5025

    threatstack@famapr.com

  • Threat Stack Cloud Security and Monitoring Now Integrates With Slack For Real-Time Response to Security Threats

    New Integration Provides Security Alerting and Immediate Collaboration for Security and DevOps Teams

    BOSTON– March 9, 2016 – Threat Stack, a leader in cloud security management and compliance, today announced its integration with team communication platform Slack. The Slack integration with Threat Stack’s Cloud Security Platform™ alerts channel members to security concerns and enables instant workflows for cloud-based security operations center (SOC) teams. The Threat Stack Slack integration improves the speed at which team members can respond to and communicate about real threats the instant they happen.

    “Threat Stack’s integration with Slack alerts our entire DevOps team to security concerns and alerts in real-time,” said John de Freitas, principal software engineer, OnShape.”Threat Stack helps us to collaboratively detect potential security issues, and Slack allows us to communicate and address them immediately.”

    “Today’s fast growing businesses leveraging modern infrastructure for scale need to incorporate security into day-to-day workflow tools,” said Pete Cheslock, senior director of operations and support, Threat Stack. “Integrating Threat Stack security alerts into Slack allows for context and conversation around important events, providing valuable insight into activities happening across your infrastructure.”

    Threat Stack’s Slack integration automates SOC team’s processes, delivering only the most important security alerts directly into a designated Slack channel. After all alerts are thoroughly analyzed and baselined within Threat Stack, Severity 1 and 2 alerts are delivered to Slack, including:

    • Abnormal user behavior (e.g., insider threats)
    • Abnormal process behavior (e.g., new process behavior)
    • Abnormal network behavior (e.g., connections to new and bad IPs)
    • File tracking and copying of files
    • Abnormal infrastructure and CloudTrail activity

    The Slack integration works alongside Threat Stack’s audit trail capabilities, and improves SOC teams’ workflows by pinning alerts, dismissing alerts and identifying new patterns and rules. Additionally, Slack Plus users can easily archive conversations for audit and compliance purposes.  By leveraging the benefits of Slack’s real-time communication, users gain deeper context on Threat Stack security alerts and the ability to collaborate pre- and post-alert to determine the best course of action.

    To learn more about Threat Stack’s Slack integration, please visit our blog.

    Availability

    Existing customers can get started by simply providing their webhook API and alert severity preferences in the Threat Stack dashboard.  New customers can get started here: http://get.threatstack.com/threat-stack-free-trial

    About Threat Stack

    Threat Stack enables growth-driven companies to scale with confidence by identifying and verifying insider threats, external attacks and data loss in real-time. The only fully integrated, cloud-native continuous monitoring solution that gives companies instant visibility and automatically responds to changes in their environment, Threat Stack provides the coverage needed to run secure and compliant, in all environments, without sacrificing speed and efficiency. For more information, or to start a free trial, visit threatstack.com.