In January Bitdefender started the Early Access Program (EAP) for new functionality within Bitdefender GravityZone, Bitdefender CSPM+ (Cloud Security Posture Management +). This new module is part of an ongoing project that enhances the multi-layered security strategy and extends the prevention layer for all organizations with public cloud infrastructure footprints by defeating attacks before they cause damage.
Misconfigured cloud resources remain a key factor contributing to data breaches associated with cloud services. The root of this challenge is Cloud service providers use the Shared Responsibility model. It means cloud providers are responsible for ensuring the security of the cloud infrastructure and services, including the underlying hardware, network, and software components. What customers are responsible for includes securing their data, applications, identity access management, and configurations within the cloud environment.
Simply put, a common myth around cloud computing security is based on the misconception that someone else manages it. The reality is customers are responsible for ensuring the security of their cloud workloads which operate on the cloud platform. With Bitdefender CSPM+ organizations can manage their security and compliance risks without requiring deep cloud security expertise and broad teams.
Bitdefender CSPM+
Bitdefender CSPM+ includes not only Cloud Security Posture Management (CSPM) functionality, ensuring the secure and compliant configuration of cloud resources and services to identify and mitigate potential security risks and misconfigurations, but also Cloud Identity and Access Management Security (IAM). The IAM – sometimes referred to as CIEM (Cloud Infrastructure Entitlement Management) – functionality manages user identities and access permissions within the cloud environment. These integrated functionalities provide security and precise control over cloud resources, creating a comprehensive and secure cloud computing environment.
Complete Visibility Into Hybrid Cloud Environments
The CSPM+ management platform is a consolidated component of Bitdefender GravityZone. Integration enables full visibility into public cloud assets and identities on Amazon Web Services (AWS), Google Cloud Platform (GCP), and Microsoft Azure. Administrators can specify the scanning frequency for the cloud environment at the integration level, choosing between daily, weekly, or on-demand scans based on the dynamic nature of the cloud setup. This agentless integration collects and analyzes cloud configuration metadata from customer cloud footprints. Since CSPM+ integrates directly with the cloud provider on the management plane rather than using traditional, in-workload agents, it has zero impact on workload performance.
Click here to access the whole article in Bitdefender’s blog.
