Pramod Gosavi’s Post

Insightful post on the broader Cyber market by Pramod Gosavi. As M&A is picking back up, should be telling how this table shapes up over the course of the next 12-18 months for Cyber. However, it is important to note that acquisitions are a "point in time." Companies must continue to build on top of any acquisition to achieve overall growth goals and platform completeness!

Very nice summary of cloud security vendors, especially with the consolidation context. Valuable comments on it too, if you're interested in this kind of thing 🔎

i spoke with a value-added reseller doing >$30m in federal business annually about the challenge the growth of cloud has presented our customers here's what stood out the most: 1) diverse application architectures ----> serverless, container-based, traditional server-based architectures...each introduces new attack vectors and a differing sets of security concerns. 2) software supply chain ----> open-source development has exploded. Great for free technical support and resources but requires security teams to have a tool that identifies vulnerabilities across an application's entire supply chain 3) duplicative toolsets ----> multi-cloud forces customers to learn and pay for multiple tools that provide the same function on top of this, cloud infrastructure has become a primary threat vector I let him know this has lead to a number of security challenges such as: tool proliferation, visibility gaps, slow incident response.. What do you think are the top challenges widespread cloud adoption has presented?

Logs are often seen as a costly effort to keep into the cloud but in this webinar you'll learn how Datadog can help you access, store and investigate logs cost-effectively. Co-hosted by 2 great companies: Cloudflare and Datadog!

Based on the reviews after hearing the news and following the security platforms. I understood the below: Microsoft: Platform play owning windows and expanding to EDR, data security, Identity, XDR/SIEM. Cloud security is consolidation (not strong pull), dev security is GitHub consolidation and has done well due to GTM Palo Alto Networks: Expanding to Cloud security (+DSPM) and XDR/SOAR and now SIEM is consolidation and not platform play. Core firewall/network security was not a platform. Probably most controversial POV. The platform play comes after SIEM as SIEM allows more products to be sold as the best integrated product operationally and risk mgmt wise CrowdStrike: Strong platform play starting from EDR and expanding to XDR, identity (ITDR), data security, cloud security (selling the agent in the cloud). The dev product (Bionic) is consolidation to leverage the GTM Zscaler: SASE providing identity (ZT) and data security (DLP). Need consolidation Wiz: Cloud security platform expanding to cloud XDR, data security (DSPM) and consolidating dev security (possible Dazz acq) Okta: Microsoft slept on SaaS for a while. Consolidating IGA, PAM now. Not a platform play as IGA/PAM supports multiple/hybrid platforms and not just SaaS where Okta is dominant Netskope: SASE providing identity (ZT) and data security (DLP). Should have expanded to cloud security Cloudflare: SASE providing identity (ZT). Still light on security Snyk: Developer security, not much play in cloud security Feedback/comments?

🔎 Learn why runtime visibility is crucial for CNAPPs in the 2024 Gartner Market Guide! Runtime visibility has become essential for every Cloud-Native Application Protection Platform (CNAPP). This year's guide from Gartner emphasizes that top CNAPPs offer real-time insights into cloud workloads, allowing for proactive risk management and enhancing the developer experience by integrating seamlessly with their tools. As the first #CloudSecurity vendor to incorporate end-to-end detection and response in its CNAPP, Sysdig is recognized for its outstanding runtime security capabilities, powered by the core threat detection engine, Falco. Download the full report to discover what other features are deemed "mandatory" for CNAPPs in 2024, according to #Gartner. 👉 https://okt.to/uo8nZG

"Varonis: #1 Data Security Platform delivering automated outcomes with deep data visibility, classification capabilities, and automated remediation for data access. Rated #1 overall in three Gartner Peer Insights markets." "Varonis is the #1 Data Security Platform, providing organizations with critical data visibility, classification capabilities, and automated remediation for data access. Our all-in-one SaaS platform, powered by AI and advanced security features, helps businesses fuel digital growth with improved data security posture. Discover and classify sensitive data accurately, prevent exfiltration in cloud environments, enforce secure settings and least privilege policies, detect abnormal activity from threats, and fix SaaS misconfigs with Varonis. We offer comprehensive coverage for Microsoft 365, Windows File Shares, SaaS apps, IaaS, databases, and more. Trusted by top companies, Varonis has been recognized by Gartner as the Customers' Choice in DSPM. Our cloud-native architecture and managed data detection and response

Latio List v1.11 is live, the changes: Added seedata.io to Boundary Breakers - Honeypots as a service is a dope and underrated detection tool Added SecOps Solution to Remediation Platforms - Network based vuln scanning and patching - great option for non-container platforms Added Infield to Code Fixers - Great team offering SaaS and services for painful version upgrades Added Sonrai Security to Cloud Identity - Probably the fastest way to get your cloud 80% more secure than it was before by focusing on boundaries instead of least privileged Added Push Security to Corporate Identity - Browser plugin for detecting unsafe SaaS use/risk from employees https://list.latio.tech/

From Over-Permissioned to Secure: Designing Least Privilege IAM Policies in the Cloud 🌩️ 🚀 In today’s cloud-first world, security is non-negotiable. Over-permissive IAM policies remain one of the biggest risks to any cloud environment. That’s why designing Least Privilege IAM policies is critical to your cloud security strategy! 👉 What is it? The least privilege principle ensures users and systems only have the permissions they need to perform their tasks—nothing more. 🔒 Here’s How You Can Implement Least Privilege in Your Cloud IAM Policies: 1️⃣ Define Roles and Responsibilities: Map user roles to specific tasks, granting only essential access. 2️⃣ Start with Deny by Default: Avoid granting broad permissions like *. 3️⃣ Use Managed Policies: Standardize reusable policies across the organization. 4️⃣ Grant Temporary Access: Time-limit sensitive permissions to reduce risk. 5️⃣ Enable Conditional Access: Restrict access by IP, time, or MFA requirements. 6️⃣ Monitor & Audit Regularly: Identify and remove unused permissions with tools like IAM Access Analyzer or Policy Recommenders. 7️⃣ Adopt ABAC: Use dynamic attributes like user roles, departments, or projects for flexible control. 🌐 Challenges: Even with the best intentions, designing least privilege can get tricky: 🔸 Complex cloud setups make it hard to manage permissions. 🔸 Dynamic workloads like containers or serverless functions need constant updates. 🔸 Inherited permissions can create shadow risks. The Solution? Leverage tools like: ✅ IAM Policy Simulators to test before deployment. ✅ Identity Analytics for real-world permission insights. ✅ Centralized IAM Management for consistency across accounts. Why Does This Matter? 🔑 Protecting sensitive data and resources starts with getting IAM right. Over-permissioned roles are an open invitation to attackers. By embracing least privilege, you: ✔️ Reduce your attack surface. ✔️ Ensure compliance with regulations. ✔️ Build trust in your cloud environment. 💡 What’s your take on least privilege IAM policies? Have you faced challenges implementing it in your cloud environment? Let’s share ideas and learn from each other. Drop your thoughts below! 💬 #cloudsecurity, #cloudsecurityarchitect, #IAMDESIGN #LEASTPRIVILAGES #EnterpriseSecurityArchitect, #cloudsolutionarchitect, #cloudsolutionimplement, #solutionarchitect, #cloudnativearchitect, #cloudnative

🔥 #DefenderForCloud #CNAPP delivers ✅ Shorter threat #investigation and #remediation times ✅ Improved security operations center (#SOC) #productivity ✅ Lower total #cost of #ownership 👉 In order to prove the solution’s business benefits, Microsoft commissioned #Forrester Consulting to conduct a Total Economic Impact™ (#TEI) study. The study aims to provide business leaders and decision-makers with a solid framework with which they can evaluate the benefits and potential financial impact of Defender for Cloud on their organizations. 💡 Forrester TEI Report: https://lnkd.in/dwdmzkpK 💡 Blog: https://lnkd.in/dmY2tmDh #CSPM #CWP #XDR #CNAPP