Lacework Adds Active Host Vulnerability Monitoring and CI/CD Integrations
August 19, 2020

Lacework will introduce Active Host Vulnerability Monitoring, pre-flight checks, and CI/CD automation workflows to its comprehensive SaaS security offering.

Customers scaling services in the cloud will now have the telemetry to know what to fix in just three clicks without having to reference multiple tools as they safely build and innovate at speed.

Lacework was built from the ground up for detecting and observing security threats in the cloud, including serverless, containers, and Kubernetes workloads, and streamlines security tasks for software teams building on Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). The company has seen a surge of demand for seamless DevSecOps workflow tooling and a unified, well-integrated cloud security solution.

The addition of host vulnerability monitoring addresses the security challenges of protecting modern, ephemeral container and host architectures and workflows. It consolidates multiple tools and significantly eases the process of fixing vulnerabilities before they go into production with preflight host vulnerability scans, active vulnerability identification, and enhanced CI/CD tooling for DevOps workflows. Lacework’s intrusion detection agent helps DevOps stay focused on innovation by alerting teams to only those vulnerabilities that carry a viable potential risk.

“Incumbent security offerings focus on vulnerabilities, but they do not capture or decipher the breadth of data—at scale—required to know whether you are truly vulnerable or not,” said Dan Hubbard, CEO of Lacework. ”Efficacy is crucial because not all vulnerabilities render you vulnerable. For example, one of our customers believed they had 51,000 vulnerable hosts but were able to narrow that down to 78 active machine images with Lacework. The power of our SaaS cloud security platform is that we can add new capabilities quickly so that our customers can build and secure clouds more effectively.”

By providing telemetry of what is actually active and vulnerable at the package level, Lacework helps customers focus their remediation effort on something that is actionable and manageable. Additional benefits of Lacework’s Active Host Vulnerability Monitoring update include:

- Ephemeral Hosts at scale: Telemetry to distill and focus on vulnerabilities in ephemeral and immutable infrastructure.

- Pre-Flight Check API: Scan a host image (e.g., AWS AMI) for known vulnerabilities before deploying to a live environment.

- Active vulnerabilities: connect known CVEs with active packages on hosts for live visibility to active packages with associated vulnerabilities.

- CI/CD Integrations: Tighten the feedback loop and shift security left by integrating the Lacework API into CircleCI, Github, Gitlab, Jenkins, and other workflows.

- Security team reports: Shift security right with tailored reports on new active CVEs, and know definitively when a patch has been applied.

- Updated CLI for self-serve vulnerability scanning and data and a new vulnerability dashboard.

Lacework’s SaaS cloud security platform protects against threats from build-time through run-time. As a result, customers are able to access an always growing suite of well-integrated security capabilities in a central, unified solution.

Share this

Industry News

December 03, 2020

Copado announced its Winter 21 release, providing end-to-end DevOps value stream management platform for Salesforce.

December 03, 2020

MayaData and Platform9 announced a collaboration for the deployment and operation of performance-sensitive stateful workloads on Kubernetes.

December 03, 2020

Harness announced first-class integration with Amazon Elastic Container Service (ECS) Container Orchestration, enabling mission-critical applications to run in Docker containers with less scripting and redundancy, and out-of-the-box deployment strategies.

December 02, 2020

Amazon Web Services (AWS), an Amazon.com company, announced Amazon DevOps Guru, a fully-managed operations service that uses machine learning to make it easier for developers to improve application availability by automatically detecting operational issues and recommending specific actions for remediation.

December 02, 2020

Salesforce and Slack Technologies have entered into a definitive agreement under which Salesforce will acquire Slack.

December 02, 2020

Kasten by Veeam announced Kasten K10 v3.0.

December 02, 2020

Mattermost announced the launch of Mattermost Cloud, a new SaaS platform that is designed to optimize collaboration for DevOps teams and privacy-conscious enterprises.

December 01, 2020

CloudBees announced a virtual launch event on December 10 to formally release the first two modules of its Software Delivery Management solution: CloudBees Engineering Efficiency and CloudBees Feature Management.

December 01, 2020

GitOps creator Weaveworks announced the availability of release 2.4 of Weave Kubernetes Platform (WKP).

December 01, 2020

Adaptavist has joined the Sonatype partner program as a Platinum Enterprise Partner.

November 30, 2020

Shipa is open sourcing Ketch, Shipa's deployment engine, under Apache License Version 2.0.

November 30, 2020

Portworx by Pure Storage announced its qualification and support of Portworx Enterprise for Google Cloud's Anthos on bare metal.

November 30, 2020

SnapLogic now supports SaaS contracts in AWS Marketplace, a digital catalog with thousands of software listings from independent software vendors that make it easy to find, test, buy, and deploy software that runs on Amazon Web Services (AWS).

November 24, 2020

Red Hat announced new capabilities and features for Red Hat OpenShift, the company's enterprise Kubernetes platform.

November 24, 2020

Sectigo released Chef, Jenkins, JetStack Cert-Manager, Puppet, and SaltStack integrations for its certificate management platform.