Cloud security startup Accurics emerged from stealth today to tackle the challenges of securing cloud infrastructure throughout the DevOps life cycle. Accurics has raised $5 million in funding from investors including ClearSky, WestWave Capital, Firebolt Ventures, and Secure Octane.
The company is also releasing a free version of its platform, which aims to minimize "drift" between infrastructure defined through code and infrastructure computing running in the cloud. As organizations adopt new technologies like containers and serverless, cloud infrastructure is becoming increasingly immutable, and infrastructure is rarely modified after it's deployed. If something needs to be modified after deployment, new infrastructure has to be provisioned.
Broad and fast adoption of cloud technologies is driving innovation, says Accurics co-founder and CEO Sachin Aggarwal, but it introduces new challenges in protecting more complex cloud stacks.
Security issues in cloud deployments are often ignored because finding and fixing problems is expensive and complicated. Security teams grapple with multiple management interfaces, driving the risk of manual errors. Hybrid and multicloud deployments can worsen the problem.
As cloud deployments increase, so do issues with consistency. Technologies such as Docker, Terraform, Kubernetes, and OpenFaaS manage infrastructure through code and reduce manual errors, but they make it difficult to maintain governance across the cloud stack. Then there is cloud drift: In environments where change is constant, little is locked down. Privileged users can make infrastructure changes in production, but even legitimate changes can be risky.
"What happens is once cloud is provisioned, there's a tendency for highly privileged users to go and make changes in the cloud," Aggarwal tells Dark Reading. "That could be a good change or a ..
Support the originator by clicking the read the rest link below.
