Aqua Security and Pivotal Team Up to Bring New Application Security Solution to the Enterprise

BOSTON, Oct. 9, 2018 /PRNewswire/ -- Aqua Security today announced the general availability of Aqua Security for (PCF) as an integrated service for Pivotal Cloud Foundry® (PCF). Pivotal users can now download and install the Aqua Security for PCF service from Pivotal Network, and use it to scan application or container artifacts for vulnerabilities. Aqua Security for PCF empowers Pivotal Cloud Foundry users to apply Aqua Security's best practices early on in the build process to ensure that only code that complies with their organization's security and compliance policies is deployed.

"Aqua Security provides valuable insights into IT security posture with automated security scans, threat detection, remediation, and expedited compliance processes at scale," said Nima Badiey, Head of Technology Ecosystem at Pivotal. "We are excited to make this integrated solution available to all Pivotal customers through the Pivotal Services Marketplace. One of the many advantages of using Pivotal to build containerized, cloud-native applications is that it presents an opportunity to improve application security, and Aqua helps Pivotal customers do that at DevOps speed."

Aqua Security for PCF provides enterprise customers with the following capabilities:

• Automatically scan application or container artifacts for known vulnerabilities, based on an updated feed from multiple resources (e.g., public CVEs, vendor-issued, proprietary vulnerability data streams and malware lists)
• Identify unauthorized application or container artifacts based on pre-configured assurance policies that check for:

• Authorization
• CVEs and score
• Presence of hard-coded secrets
• Presence of malware

• Add custom compliance checks to identify security and compliance risks (e.g., PII, PCI, GDPR-related data)
• Developers and Security teams get actionable information on how to mitigate detected vulnerabilities
• Users gain visibility into vulnerabilities in their application or container artifacts directly from CI/CD tools and the Aqua dashboard

The Aqua solution is easy to operate, supports more than 40 languages, including Java, Go, C++, Python, Ruby, NodeJS and others, as well as static binaries, and finds known vulnerabilities, embedded "secrets", and malware. Users can integrate Aqua Security with their existing CI/CD tools for security testing as part of the build, with Active Directory/LDAP for user authentication, and with SIEM/analytics to output audit and alert data. Based on image assurance policies, users can then approve or block application or container artifacts depending on their vulnerability posture, the presence of embedded secrets, malware, and runtime configuration parameters.

"We are extremely excited to extend Aqua's security capabilities to Pivotal Cloud Foundry users," said Upesh Patel, Vice President of Business Development for Aqua Security.  "Our automated lifecycle security controls enable organizations to integrate security best practices into the build process based on their compliance or corporate GRC requirements."

Aqua to Speak at Cloud Foundry Summit Europe 2018
At the upcoming Cloud Foundry Summit Europe 2018 in Basel, Switzerland, Aqua's John Michealson will deliver a presentation. The session will examine how the growing adoption of containers and the availability of scalable orchestration tools (e.g., Kubernetes) are creating opportunities to develop more agile, easy-to-update applications that combine stateful and stateless modes, and why that creates very different security considerations and risk profiles.

• Presentation title: "Security Considerations for CF Container Runtime vs. CF Application Runtime"
• Date: Wednesday October 10, 2018 15:10 - 15:40
• Location: Congress Center Basel, Kairo 1 & 2

About Aqua Security
Aqua Security enables enterprises to secure their container and cloud-native applications from development to production, accelerating application deployment and bridging the gap between DevOps and IT security. Aqua's Container Security Platform provides full visibility into container activity, allowing organizations to detect and prevent suspicious activity and attacks in real time. Integrated with container lifecycle and orchestration tools, the Aqua platform provides transparent, automated security while helping to enforce policy and simplify regulatory compliance. Aqua was founded in 2015 and is backed by Lightspeed Venture Partners, Microsoft Ventures, TLV Partners, and IT security leaders, and is based in Israel and Boston, MA.  For more information, visit www.aquasec.com or follow us on twitter.com/AquaSecTeam.

Press inquiries:
Rachel Kaseroff
RJK Communications
[email protected]
+1 (415) 341-5625

SOURCE Aqua Security

Related Links

http://www.aquasec.com