Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Cloud

2/12/2020
09:45 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Tufin SecureCloud Enables Companies to Secure Hybrid Cloud Environments Without Compromising Business Speed or Agility

BOSTON – February 11, 2020 – Tufin® (NYSE: TUFN), a company pioneering a policy-centric approach to security and IT operations, today announced the availability of Tufin SecureCloud™, a security policy automation service for enterprises needing to gain visibility and control of the security posture of their cloud-native and hybrid cloud environments. SecureCloud, built from the ground up and optimized for the cloud, is a major new addition to the Tufin Orchestration Suite – establishing Tufin as the first and only vendor to unify security policy management across on-premises, cloud-native, and hybrid clouds.  

SecureCloud combines and extends the functionality previously available in Tufin Orca and Tufin Iris, and unifies cloud security policy management for container, microservices and hybrid cloud environments in a single solution – giving organizations greater visibility and control of cloud security, regardless of environment.

Today’s enterprises are rapidly moving workloads to the cloud to bring products to market quicker, be more responsive to customers’ needs, and to take advantage of business opportunities. But, all too often in today’s dynamic cloud development environments, developers have the ability to build and deploy applications, totally bypassing security. As a result, security teams find themselves with complex, fragmented networks, and lack the visibility and control required to ensure security and compliance. Ensuring the security and compliance of cloud-native and hybrid cloud environments, including Kubernetes, SecureCloud provides security policy visibility, automated security policy discovery and generation, and the ability to establish a zero trust security model, without compromising the business agility benefits of moving to the cloud or developer productivity.

According to a research report from Gartner, “Nearly all successful attacks on cloud services are the result of customer misconfiguration, mismanagement and mistakes. Security and risk management leaders should invest in cloud security posture management processes and tools to proactively and reactively identify and remediate these risks.” (Gartner “Innovation Insight for Cloud Security Posture Management,” published 25 January 2019 by Gartner Distinguished VP Analyst Neil MacDonald).

Business goals and digital transformation efforts are best met when DevOps and security teams can function most efficiently and effectively. SecureCloud’s policy automation empowers DevOps and security teams by removing the need to introduce new processes or technologies that traditionally impact business agility and create friction. Tufin SecureCloud automatically generates, provisions and synchronizes security policy changes across hybrid cloud environments.

“Enterprises are rapidly moving workloads to the cloud to gain greater business agility, achieve business goals, and drive digital transformation efforts,” said Ruvi Kitov, CEO and Co-Founder of Tufin. “However, these new workloads often integrate with systems that reside in the data center or private cloud.  With the addition of SecureCloud to the Tufin Orchestration Suite, for the first time, companies can enforce consistent policies across the entire hybrid cloud, enabling unified security policy management, regardless of environment. Tufin’s policy centric, automation-based approach to managing security enables organizations to move to the cloud without compromising on security or developer productivity.”

Tufin SecureCloud is generally available now.

For more information on SecureCloud, please visit: https://www.tufin.com/tufin-orchestration-suite/securecloud

About Tufin

Tufin (NYSE: TUFN) simplifies management of some of the largest, most complex networks in the world, consisting of thousands of firewall and network devices and emerging hybrid cloud infrastructures. Enterprises select the company’s Tufin Orchestration Suite™ to increase agility in the face of ever-changing business demands while maintaining a robust security posture. The Suite reduces the attack surface and meets the need for greater visibility into secure and reliable application connectivity. With over 2000 customers since its inception, Tufin’s network security automation enables enterprises to implement changes in minutes instead of days, while improving their security posture and business agility. 

Find out more at: www.tufin.com

Follow Tufin on Twitter: @TufinTech

Read more on Tufin’s blog: Suite Talk

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
State of Cybersecurity Incident Response
State of Cybersecurity Incident Response
Data breaches and regulations have forced organizations to pay closer attention to the security incident response function. However, security leaders may be overestimating their ability to detect and respond to security incidents. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-11498
PUBLISHED: 2020-04-02
Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tun_darwin.go or tun_windows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persistenc...
CVE-2020-11499
PUBLISHED: 2020-04-02
Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web request, as demonstrated by mishandling of the tags and version fields in helperFunctions/mongo_task_conversion.py.
CVE-2020-7628
PUBLISHED: 2020-04-02
install-package through 1.1.6 is vulnerable to Command Injection. It allows execution of arbitrary commands via the device function.
CVE-2020-7629
PUBLISHED: 2020-04-02
install-package through 0.4.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the options argument.
CVE-2020-7630
PUBLISHED: 2020-04-02
git-add-remote through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary commands via the name argument.