iscover
Share this article on:
Powered by
MOMENTUM
MEDIA
Tenable announced new features for Terrascan, their open source cloud native security analyser that is designed to assist developers secure Infrastructure as Code (IaC).
The Cyber Exposure company has implemented the new capabilities to enable organisations embed security into their DevOps tooling, pipelines and supply chains, mitigating risks before infrastructure is provisioned.
It’s now more critical than ever for developers to have tools that can detect compliance and security violations across their entire cloud systems, including IaC, according to Nico Popp, chief product officer at Tenable.
“Just as IaC opens the door to programmatically embed policy checks earlier in the development lifecycle, Terrascan detects compliance and security violations across IaC to mitigate risk before provisioning."
"We are committed to ensuring Terrascan remains open and available to all development teams and are excited to contribute to its growth,” Popp said.
Among other advances, Terrascan now features:
Terrascan is designed to deliver a scalable way to ensure that cloud infrastructure configuration adheres to evolving security best practices.
It assists with identifying issues such as missing or misconfigured encryption on resources and communication, and inadvertent exposure of cloud services. Terrascan aims to fundamentally enhance the value of IaC used by organisations to define and manage cloud infrastructure and improves security by enabling teams to eliminate risk before infrastructure is deployed.
In addition to Terrascan, Tenable offers Accurics by Tenable, that also enables enterprise customers to protect the full cloud-native stack throughout the DevOps lifecycle, from the time it is defined in code through production usage.
[Related:
Be the first to hear the latest developments in the cyber industry.
