Category: Uncategorized

2022 “GigaOm Radar for Policy As Code” Report Prisma Cloud named a Leader in policy enforcement. The Only CNAPP Recognized in the PaC Report Policy as code (PaC) solutions help organizations mitigate risk by creating, managing, and enforcing policies designed to maintain security and operational best practices. The 2022 “GigaOm Radar for Policy As Code”…

Prisma Cloud Named a Leader in The Forrester Wave™ for CWS Cloud Workload Security, Q1 2022 Report: Cloud Workload Security Vendors Ranked “Palo Alto Networks has differentiated plans to develop and improve its CWP capabilities and grow headcount to support and implement its CWS solution.” – Forrester Wave™: Cloud Workload Security, Q1 2022 In today’s…

Software Composition Analysis (SCA) Checklist Discover six SCA solution must-haves. How to Match SCA Solutions to Your Specific Needs It’s simple: software composition analysis (SCA) helps teams prevent open-source security and compliance risks. But the choices have gotten complicated. While this automated application security process has been around for decades, the rise of agile, cloud-native…

Prisma Cloud Named a Leader in CSPM 2022 GigaOm Radar for Cloud Security Posture Management Report The Code-to-Cloud CNAPP Is a CSPM Outperformer Cloud security posture management (CSPM) solutions help reduce risk across multicloud environments by proactively identifying and remediating critical misconfigurations. However, not all CSPM options are equal. The 2022 GigaOm Radar for Cloud…

Palo Alto Networks Named a CNAPP Leader Frost Radar™: Cloud-native Application Protection Platforms Prisma Cloud Leads in Innovation and Market Growth Cloud-native application protection platform (CNAPP) solutions integrate security and compliance capabilities to secure cloud-native applications throughout the application development lifecycle. With over 15 CNAPP solutions on the market, how do organizations know which is…

O’Reilly Cloud Native Security Cookbook – Recipes for a Secure Cloud With the rise of the cloud, every aspect of IT has been shaken to its core. The fundamentals for building systems are changing, and although many of the principles that underpin security still ring true, their implementation has become unrecognizable. This practical book provides…

Software Supply Chain Security Checklist 7 Rules to Protect Your Supply Chain from Attack Software supply chains are made up of software components like open source packages and infrastructure as code (IaC) templates, as well as underlying delivery pipelines, such as version control systems (VCS) and continuous integration/continuous delivery (CI/CD) pipelines. Because software supply chains…

The DevSecGuide to Kubernetes The Definitive Guide to Kubernetes, IaC and DevSecOps From securing modular Kubernetes® components like Helm and Kustomize to automating security guardrails across the development lifecycle, DevSecOps for Kubernetes requires an integrated and modern approach. As the de facto container orchestrator, Kubernetes has undeniable benefits when it comes to building performant and…

The DevSecGuide to IaC Security Get this DevSecGuide on shift-left cloud security. IaC for DevSecOps: The Pros, Cons & Considerations DevSecOps is all about maintaining security without sacrificing productivity or speed – especially for teams that are leveraging modern, cloud-native technologies such as infrastructure as code (IaC). IaC has become a popular way to predictably…

Unit 42 Cloud Threat Report, Volume 6 IAM the first line of cloud infrastructure defense. Cloud Threat Actors Have IAM Misconfigurations in Sight As the cloud evolves, so should your security strategy. But before you commit to a plan, make sure your cloud security teams are asking the right questions. These include: Who is attacking…