PureSec Initiates Industry's First OWASP Top 10 Project for Cloud-Native Application Security
Addresses application security challenges for Cloud-Native Applications, and calls other organizations to contribute
TEL AVIV, Israel, Sept. 26, 2018 /PRNewswire/ -- PureSec, the leader in serverless security, today announced that it has initiated work on a new OWASP incubator project that will identify some of the more critical risks related to cloud-native applications. The document will raise awareness and create a baseline for application security in modern cloud-based application architectures such as serverless computing, container-based applications and microservices. The 'OWASP Top 10 for Web Application Security Risks' project is referenced by many standards, books, tools, and organizations, including MITRE, PCI DSS, DISA, FTC, and many more.
Cloud-native technologies enable organizations to build scalable applications in modern, dynamic environments such as public, private, and hybrid clouds. Serverless computing, containers, service meshes, microservices, immutable infrastructure, and declarative APIs are examples of this approach.
"Cloud-native applications enable fundamental new approaches to designing and building software. However, they also introduce many new security challenges, which is why we decided it was time to initiate and lead this project," said Ory Segal, CTO and co-founder at PureSec. "PureSec is planning to merge the contents of our "Serverless Security Top 10" guide, which we published earlier this year, into this broader cloud-native guide".
The original Serverless Security Top 10 (2018) guide was developed by PureSec with contributions and peer-review from organizations such as: IBM, iRobot, Denim Group, Cisco, Nordstrom, Asurion, Capital One, Microsoft, Check Point, A Cloud Guru and Cloud Academy.
PureSec is calling for interested organizations and individuals to participate and contribute by joining the project.
About PureSec
As the global leader in serverless architectures security, PureSec enables its customers to build and maintain secure and reliable serverless applications. The company's end-to-end serverless security solution is the industry's first and most comprehensive Serverless Security Runtime Environment (SSRE).
To learn how PureSec solutions and its team of serverless security experts are helping businesses to secure their serverless applications, please visit www.puresec.io, and follow @PureSecTeam on Twitter.
Media Contact
Lazer Cohen
WestRay Communications
[email protected]
SOURCE PureSec
Share this article