Lacework Prioritizes Cloud Security Risks with New Vulnerability Risk Management Technology

The new risk-based score is made possible with the Lacework agent, which now automatically detects active vulnerable packages, saving organizations from spending time upgrading unused dependencies caused by software bloat. This in-depth understanding of the customer's unique environment, together with innovative research and exploit intelligence, produces custom risk-based vulnerability scores that fit each customer's business scenarios. This provides organizations with context that enables them to focus on the 10% of NVD critical vulnerabilities that truly pose a risk to their business, freeing up resources for developer innovation without sacrificing security.

The new risk-based score is made possible with the Lacework agent, which now automatically detects active vulnerable packages, saving organizations from spending time upgrading unused dependencies caused by software bloat. This in-depth understanding of the customer's unique environment, together with innovative research and exploit intelligence, produces custom risk-based vulnerability scores that fit each customer's business scenarios. This provides organizations with context that enables them to focus on the 10% of NVD critical vulnerabilities that truly pose a risk to their business, freeing up resources for developer innovation without sacrificing security.

"One of our biggest cloud security challenges is getting the visibility and context we need to prioritize risks across our environment. With this innovation from Lacework, we can now provide developers with just a handful of work items that need their attention. They will no longer waste time on vulnerabilities that do not pose a risk," said Zachary Rohrbach, Staff SecurityEngineer at Quickbase. "Beyond increasing our efficiency, this will also help build trust between our development and security teams."

Another core component of the new risk-based score is internet exposure from attack path analysis which Lacework introduced last year. Today, Lacework is announcing expanded attack path analysis capabilities to more efficiently prioritize work items and protect data. This functionality also means organizations can innovate with both speed and safety. New capabilities include:

"As cybersecurity increasingly becomes an executive and board-level discussion, CISOs are looking for platforms which can provide comprehensive visibility across their cloud environment so they can take action against critical risks quickly," said Sowmya Karmali, Director of Product Management, Lacework. "Our customers can't afford to spend time fixing inactive vulnerabilities in their environment. With our deep understanding of each customer's cloud environment and our novel approach to vulnerability risk management, Lacework is the only CNAPP that can help customers increase operational efficiency and better prioritize cloud security risks through visibility and context."

Resources:

Lacework offers the data-driven security platform for the cloud and is the leading cloud-native application protection platform (CNAPP) solution. Only Lacework can collect, analyze, and accurately correlate data — without requiring manually written rules — across an organization's cloud and Kubernetes environments, and narrow it down to the handful of security events that matter. Security and DevOps teams around the world trust Lacework to secure cloud-native applications across the full lifecycle from code to cloud. Get started at www.lacework.com.

Logo - https://mma.prnewswire.com/media/1865984/3991700/Lacework_Logo.jpg

View original content:https://www.prnewswire.co.uk/news-releases/lacework-prioritizes-cloud-security-risks-with-new-vulnerability-risk-management-technology-301801472.html