Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Validate modifications across numerous supported resource types in all leading cloud service providers. Conduct scans of cloud resources during the build phase to identify misconfigured settings using a straightforward Python policy-as-code framework. Examine the connections between cloud resources through Checkov’s graph-oriented YAML policies. Run, test, and adjust runner parameters within the context of a specific repository's CI/CD processes and version control systems. Customize Checkov to create your own unique policies, providers, and suppression terms. Avoid the deployment of misconfigurations by integrating this process into the current workflows of developers. Facilitate automated annotations on pull or merge requests in your repositories, eliminating the need to establish a CI pipeline or perform routine checks. The Bridgecrew platform will automatically review new pull requests and provide comments highlighting any policy violations it uncovers, ensuring continuous compliance and security improvements in your cloud infrastructure. This proactive approach helps maintain best practices and enhances the overall security posture of your cloud environment.
Description
Numerous applications and services hosted in public cloud environments utilize storage solutions like Amazon S3 buckets and Azure Blob storage. As time progresses, these storage solutions may become infected with malware, improperly configured buckets can lead to data breaches, and failure to classify sensitive information can lead to compliance issues and hefty fines. CWP for Storage plays a crucial role by automatically identifying and scanning Amazon S3 buckets and Azure Blobs, ensuring that cloud storage remains both clean and secure. Furthermore, CWP for Storage DLP implements Symantec DLP policy within Amazon S3 to effectively discover and categorize sensitive data. To facilitate remediation and additional actions, AWS Tags can be applied as necessary. Additionally, Cloud Security Posture Management (CSPM) is available for major platforms such as Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). While containers enhance operational agility, they also introduce a variety of public cloud security challenges and vulnerabilities that can heighten overall risk, necessitating a proactive approach to security management. Organizations must remain vigilant and continually update their security measures to mitigate these evolving threats.
API Access
Has API
API Access
Has API
Integrations
Google Cloud Platform
Microsoft Azure
AWS CloudFormation
Amazon Web Services (AWS)
Archipelo
Bitbucket
Brainboard
Cider
CycloneDX
F5 BIG-IP SSL Orchestrator
Integrations
Google Cloud Platform
Microsoft Azure
AWS CloudFormation
Amazon Web Services (AWS)
Archipelo
Bitbucket
Brainboard
Cider
CycloneDX
F5 BIG-IP SSL Orchestrator
Pricing Details
Free
Free Trial
Free Version
Pricing Details
No price information available.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
Prisma Cloud
Founded
2019
Country
United States
Website
www.checkov.io
Vendor Details
Company Name
Broadcom
Founded
1991
Country
United States
Website
www.broadcom.com/products/cyber-security/endpoint/hybrid-cloud/cloud-workload-protection
Product Features
Static Code Analysis
Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management
Product Features
Cloud Workload Protection
Anomaly Detection
Asset Discovery
Cloud Gap Analysis
Cloud Registry
Data Loss Prevention (DLP)
Data Security
Governance
Logging & Reporting
Machine Learning
Security Audit
Workload Diversity