Progress Chef Cloud Security Released
May 10, 2022

Progress announced the release of Progress Chef Cloud Security, extending DevSecOps with compliance support for native cloud assets and enabling end-to-end management of all on premise, cloud and native cloud resources.

This new offering is complemented with new capabilities across the Chef portfolio targeting DevOps success in the most demanding and complex enterprise deployments.

This release builds on Progress’ commitment to deliver a unified and scalable platform that enables enterprises to accelerate the delivery of secure and compliant application releases in mixed computing environments.

The new offering provides the following benefits:

- Enables existing skillsets without time consuming and costly training for managing compliance and security posture for cloud native technologies including Containers, Kubernetes and microservices, ensuring the greatest possible DevOps coverage across entire fleets of assets.

- Supports native-cloud assets for multi-cloud deployment across AWS, Azure, Google and Alibaba clouds using certified CIS/DISA STIG profiles to continually scan and automatically detect security configuration issues.

- Coordinate security, development, testing and operations participation makes it easy to shift security checks to the left applying policy checks at every stage of the DevOps pipeline with coded artifacts, automated tests and enterprise control and visibility via Policy as Code approach.

- Bolsters success with the right mix of training, community and DevRel assistance, technical support as well as cloud aligned pricing and licensing.

Complementing the new Chef Cloud Security offering, Progress continues to invest in Progress Chef InSpec, the core underlying security and compliance mechanism:

- New Data Source and Host Support: As new technologies are adopted; organizations aspire to use their same DevOps practices to manage new assets. Progress has expanded data protection to include SAP ASE, IBM DB2, Mongo, Cassandra, Oracle, MS SQL, along with host CIS coverage for new RHEL, CentOS, Ubuntu Linux distributions and Mac OS Monterey.

- Cloud Protection and Scale: As organizations turn to the cloud, many of them are forced to contend with multiple public clouds. Progress has expanded CIS benchmark profile coverage for AWS, Azure, and GCP, with customizable pre-built service and resource templates for 100+ cloud resources reducing the security implementation effort while also providing best in class scale and performance.

- Ease of Use: Continuing our pursuit to accelerate DevOps journeys, Progress continues to invest in enabling DevOps practitioner success. DevOps professionals now benefit from the automated creation of code, test and documentation artifacts for new resources, improved visibility into the status and expected completion time for compliance scans, and advanced Shell command support for control and testing without file output.

As a long-time proponent of the collaboration-based ‘infrastructure as code’, Chef has applied the same principles to introduce a ‘policy as code’ for security and compliance. Chef now helps organizations achieve their goal of using a single ‘as code’ framework for their infrastructure, application, desktop, security and compliance concerns across their entire on premise, cloud and edge device inventory. The complete set of Chef capabilities are available as part of the Progress Chef Enterprise Automation Stack (EAS), designed for scale to meet the demand of the largest global enterprises, which now includes these new features:

- Combining Configuration and Compliance Processing: Chef now enables DevOps workloads to easily combine infrastructure configuration processing with compliance audits using a single consolidated policy definition. This new feature simplifies the workflow between developers, IT Ops and Security professionals implementing and running compliance audits, while providing a single management and visibility layer—capable of end-to-end processing of configuration updates, state validation and enforcement, data aggregation and integration for analysis and action triggers using ServiceNow, Splunk, ELK and more.

- Chef “High Availability” (HA): Businesses across many industries rely on Chef products to ensure high uptime and resilience of their critical systems. Chef now supports a HA topology out of the box for higher scalability, resilience and recovery of critical systems. It is available out of the box with enterprise-grade features that meet the flexible demands of scaling and security compliance of underlying infrastructures.

“Over the past several years, Chef — now under the leadership of Progress — has placed significant focus on building out security and compliance capabilities to make the DevSecOps concept achievable for our customers,” said Sundar Subramanian, EVP & GM DevSecOps, Progress. “Through a policy-as-code approach, we are extremely excited to see what our customers will accomplish as they aspire to end-to-end DevOps.”

Share this

Industry News

May 25, 2022

JFrog introduced Project Pyrsia, an open-source software community initiative that utilizes blockchain technology to secure software packages (A.K.A Binaries) from vulnerabilities and malicious code.

May 25, 2022

Kasm Technologies, in partnership with Docker, has developed Kasm Workspaces as a Containerized Desktop Infrastructure platform for streaming remote workspaces directly to your web browser.

May 25, 2022

Cascadeo announced the integration of Amazon DevOps Guru with, Cascadeo’s cloud monitoring and management platform that provides users with a single view of multi-cloud or hybrid infrastructure environments.

May 24, 2022

Oracle announced the availability of Java 18, the latest version of the programming language and development platform.

May 24, 2022

Docker announced the acquisition of Tilt, makers of a development environment as code for teams on Kubernetes.

May 24, 2022

F5 announced the release of F5 NGINX for Microsoft Azure, an Azure-native service offering developed in partnership with Microsoft, that helps customers deliver modern applications on Azure with just a few clicks.

May 24, 2022

Pegasystems announced a strategic partnership with Google Cloud that will help enable joint clients to accelerate their digital transformations with Pega’s low-code enterprise software on Google Cloud’s highly scalable cloud services.

May 23, 2022

Sauce Labs announced the release of contract testing with mocking on the Sauce Labs API Testing Platform.

May 23, 2022

Pure Storage announced a series of updates to its Portworx portfolio.

May 23, 2022

StackHawk has secured $20.7 million in capital.

May 19, 2022

Jellyfish announced the launch of Jellyfish Benchmarks, a way to add context around engineering metrics and performance by introducing a method for comparison.

May 19, 2022 announced the addition and integration of Cilium networking into its Gloo Mesh platform, providing a complete application-networking solution for companies’ cloud-native digital transformation efforts.

May 19, 2022

Aqua Security announced multiple updates to Aqua Trivy, making it a unified scanner for cloud native security.

May 18, 2022

Red Hat unveiled updates across its portfolio of developer tools designed to help organizations build and deliver applications faster and more consistently across Kubernetes-based hybrid and multicloud environments.

May 18, 2022

Armory announced public early access to their new Continuous Deployment-as-a-Service product.