Secret Scanning, Compliance View, and Team Collaboration

According to Forbes, 50% of companies experienced cyber-attack attempts every week in 2021. We are almost always on the verge of a cyber attack in this industry, which is concerning.

We realized how important it is to understand where we stand in terms of the risk factors. Thus, we introduce you to the latest feature we added to our product — Risk Score.

---

Secrets Scanning

Connect your favorite SCM and we will ensure that every commit of yours is secure. We will detect secrets, passwords, certificates — we can identify more than 1700 patterns and notify you under a minute. You can configure your own custom patterns too.

We also perform misconfiguration checks on your hundreds of GitHub repositories. Just like we detect threats on your hyperscaler events, we also detect threats and mishaps in real-time on your SCM (e.g., a private repository became public).

Go ahead and connect your GitHub. If you use Bitbucket or any other platform, talk to us and we can onboard you soon.

---

Compliance View

This is a long-awaited feature in the Misconfig capability. We have rolled out a Compliance tab under Misconfig. You can filter, view details of a specific control and all the different policies under it, and even export these details for offline consumption.

---

Review Your Events

Misconfig, Identity, and Container capabilities had the User Review feature. As a user you can tag findings with “Acknowledgement” (which further helps you open a JIRA ticket in one click) or Accept the Risk (and several other workflow statuses).

Now, the same User Review feature is available for Events. It helps the team collaborate better and not let a notification go unnoticed, which could turn out to be a real threat.

---

Upgraded Identity Dashboard / Summary Tab

The revised Identity Summary tab shows the Signals, which you can click to see the results. It also shows User Reviews like “How many Identities are signed off or flagged?”

This further helps you find stronger and actionable signals amidst all the information you have on hand.

---

Other Important Updates

• For GCP, we rolled out support for PubSub Lite, Cloud Tasks, and Dataflow Jobs.
• On AWS, we improved our catalog of Events and Threats. You can now subscribe to them from the Settings page.
• The Filter control on top of each page has more attributes you can use to filter data. You can also save your queries as Views.
• Several stability and performance updates across the system for faster response.

---

Coming Soon

• Anomaly Detection on Threats
• Smart Alerts
• IAM JIT
• Cloudanix GuardRails

---

TODO:// is not an option for Cloud Security