Product Overload!

-

(wip) Product Overload! 

With the plethora of technology & world changes in the last few years, we've managed to oversubscribe an already over-subscribed subject- IMO. 





Still confused? Check out the Cloud Readiness Guide for your starting point.

Popular

secret scanning is a must

-
Image
 Shifting as much security as we can to the Left Imagine taking multiple platforms, public, private, CI platforms such as GitLab, Travis, Jenkins, etc., and quickly ingesting into one landing page code scanning, image scanning, and even infrastructure as a code scanning you can easily manage and operationalize.  You can centrally locate and report on all your findings and report with a landing page made for you regardless of where the build or development is happening. No need to change CI platforms or providers. It just works.  Local and Public Build Servers, Runners. Developer only, cool. Developer and Operations, cool, Security and Compliance only excellent. Most of us wear many hats, and your platform should adapt accordingly. Have a single landing page to review, report, or get an idea of the big picture flow... Interested, keep scrolling You may develop locally, using build servers, cloud platforms, bastion hosts, or whatever you use or call it, it doesn't matter....
Read more

Is the Firewall dead?

-
Image
Is the Firewall dead? Depends on what you define as alive and well which  can look quite different based on many factors, but let's not get lost in semantics, and instead consider common reoccurring attempts at transformation and maturity around adoption and progression.  Full disclosure, these are my personal opinions, views, etc. If your platform cannot support what most folks refer to as the infrastructure of yesterday (which is a large majority of organizations today) mixing up public and private data centers with a range of workload types such as virtual machines, and microservices. That's a problem. Today, we see an accelerated adoption for Serverless Kubernetes, and with Organizations looking to Infrastructure as Code deployment as the end all be all to automating the entire puzzle and not just a piece here and there. Many of us are not yet there or even close, but it's coming. Not as quickly as I had imagined a few years ago, but nonetheless, it's prevalent toda...
Read more

Can Security Keep Up with Public Cloud Progression

-
Over the Last Decade Introduction Over the last ten years, the landscape of public cloud providers such as AWS, Google Cloud, and Microsoft Azure has dramatically transformed. Companies of all sizes have migrated to the cloud to leverage its scalability, flexibility, and cost-effectiveness. Alongside this migration, security controls have evolved to address new challenges. This blog will explore how customer progression and maturity have developed in areas like cloud IAM entitlement management, workloads (Kubernetes, serverless, containers), and public-facing applications. We will also highlight example solutions, particularly focusing on Check Point's CloudGuard products. Evolution of Cloud IAM Entitlement Management Identity and Access Management (IAM) is critical for securing cloud environments. Over the past decade, the complexity and granularity of IAM controls have significantly improved. Early Stages Initially, IAM was basic, often limited to simple role-based access control...
Read more