Aptible
Aptible automatically implements the security controls you need to achieve regulatory compliance and pass customer audits. Out-of-the-box compliance. Aptible Deploy enables you to meet and maintain regulatory compliance and customer audit requirements automatically. Aptible provides everything you need to meet encryption requirements so your Databases, traffic, and certificates are secure. You get automatic backups of your data every 24 hours. You can trigger a manual backup at any time, and restore in a few clicks. Logs are generated and backed up for every deploy, config change, database tunnel, and console operation, and session. Aptible monitors the underlying EC2 instances in your stacks for potential intrusions, such as unauthorized SSH access, rootkits, file integrity issues, and privilege escalation. The Aptible Security Team responds on your behalf 24/7 to investigate and resolve issues as they arise.
Learn more
Qualys Container Security
Qualys CS features a vulnerability analysis plug-in for CI/CD tool Jenkins, and soon for other CI/CD tools including Bamboo, TeamCity, and CircleCI. You can download the plugins directly from within the container security module. With Qualys CS, security teams can participate in the DevOps process to gate vulnerable images entering the system, while developers get actionable data to remediate vulnerabilities. Configure policies for preventing vulnerable images from entering the repositories. Set policies based on criteria such as vulnerability severity, and specific QIDs. Review from within the plug-in a summary of the build with its vulnerabilities, information on patchable software and fixed versions, and image layers where it is present. Container infrastructure is immutable in nature, which means containers need to be identical to the images they are baked from.
Learn more
Sonrai Security
Identity and Data Protection for AWS, Azure, Google Cloud, and Kubernetes. Sonrai’s public cloud security platform provides a complete risk model of all identity and data relationships, including activity and movement across cloud accounts, cloud providers, and 3rd party data stores. Uncover all identity and data relationships between administrators, roles, compute instances, serverless functions, and containers across multi-cloud accounts and 3rd-party data stores. Inside the platform, our critical resource monitor continuously monitors your critical data sitting inside object stores (e.g. AWS S3, Azure Blob) and database services (e.g. CosmosDB, Dynamo DB, RDS). Privacy and compliance controls are monitored across multiple cloud providers and 3rd party data stores. Resolutions are coordinated with relevant DevSecOps teams.
Learn more
Telepresence
Telepresence streamlines your local development process, enabling immediate feedback. You can launch your local environment on your laptop, equipped with your preferred tools, while Telepresence seamlessly connects them to the microservices and test databases they rely on. It simplifies and expedites collaborative development, debugging, and testing within Kubernetes environments by establishing a seamless connection between your local machine and shared remote Kubernetes clusters.
Why Telepresence:
Faster feedback loops: Spend less time building, containerizing, and deploying code. Get immediate feedback on code changes by running your service in the cloud from your local machine.
Shift testing left: Create a remote-to-local debugging experience. Catch bugs pre-production without the configuration headache of remote debugging.
Deliver better, faster user experience: Get new features and applications into the hands of users faster and more frequently.
Learn more