See how leading enterprises and cloud-first companies detect risks in public cloud environments such as AWS, Microsoft Azure, and Google Cloud Platform.

The promise of adding new security tools and capabilities to your security operations efforts is more intelligence to make better, more well informed decisions with, but do they deliver on that promise? If your Security Operations Center (SOC) team receives hundreds of “high priority” alerts every day should they even trust the risk score that is being used? An overwhelming number of alerts desensitizes the very people tasked with responding to them, leading to missed or ignored alerts or delayed responses. In this session we discuss our best strategies in the fight against alert fatigue and how to rebuild trust in security intelligence.

Why Context Matters in Cloud Security

Public cloud service providers like AWS, Azure, and GCP enable you to deliver new products and capabilities at breakneck speeds, but how do you balance speed to market against compliance mandates and security risk? Learn more about how Orca offers a single integrated platform to detect security risks at every layer of the cloud estate -- eliminating the need to deploy and maintain multiple tools such as cloud vulnerability management, workload protection, and security posture management solutions -- without the gaps in coverage, alert fatigue, and operational costs of agents.

A New Approach to Public Cloud Security

Welcome to Orca Security's Cloud Security Punch-Out! For this Punch-Out, we evaluated PAN Prisma Cloud Enterprise Edition as of August 20, 2021. In addition to a full-fledged, updated Prisma Cloud Punch-Out match, we also tested Palo Alto Networks’ claim that one of their main differentiators against Orca Security is their runtime protection. The results were shocking. Bypassing Palo Alto’s runtime protection was as easy as changing file names.

Palo Alto Networks Prisma Cloud vs Orca Security: Cloud Security Punch-Out

Public cloud providers like AWS, Azure, and GCP enable you to deliver new products and capabilities at breakneck speeds, but how do you balance speed to market against compliance mandates and risk – do you have to choose?

Join Patrick Pushor, Technical Evangelist at Orca Security, for a fast-paced session as he takes you through best practices, and pitfalls to avoid in securing public cloud infrastructure.

6 risks hiding inside every public cloud estate
 - How to get instant-on, workload-level visibility across 100% of your AWS, Azure, and GCP assets
- The power of addressing both the control plane and data plane at once
- Pros and cons of different cloud security tools: traditional agent-based tools and scanners, CWPP (cloud workload protection platforms), and CSPM (cloud security posture management)

6 Cloud Security Risks Hiding Inside Your Cloud Estate

Whether you are formally regulated or are simply looking to demonstrate your commitment to security and governance with best practice guidance, infrastructure and platform-as-a-service offerings provide unique governance challenges.  These platforms offer a wide array of services each with their own security controls that must be continuously tested against a trusted standard.  At the same time, public cloud platforms also host more traditional services like virtual machines, containers, and storage buckets.  Here risks like old unpatched software (and hence vulnerabilities), sloppy credentials embedded in a test script, misplaced PII, or keys that facilitate lateral movement are hiding within your workloads.

Dive in as we discuss how to build fully functional compliance guardrails at both the deep workload and broad cloud services levels with a single, simple approach.

Crafting Comprehensive Cloud Compliance

Are you using agents, network scanners, or CSPM tools to detect risks across your public cloud estate?  If so, there’s a better way. Delivered as SaaS, Orca’s SideScanning technology reads your cloud configuration and workloads’ runtime block storage out-of-band, giving you cloud-wide, workload-deep security and compliance for AWS, Azure, and GCP - without the gaps in coverage, alert fatigue, and operational costs of agents.

Attend this cast to see:

- Orca’s 5-minute onboarding process;
- The power of addressing the control plane and data plane at once;
- The scanning process for vulnerabilities, misconfigurations, malware, lateral movement risk, exploitable keys, weak passwords, and unsecured sensitive data;
-How to prioritize risk based on the underlying security issue, its accessibility, and blast radius.

How to Eliminate Security Blind Spots Across AWS, Azure, and GCP

About this webinar:
The promise of adding new security tools and capabilities to your security operations efforts is more intelligence to make better, more well informed decisions with, but do they deliver on that promise? If your Security Operations Center (SOC) team receives hundreds of “high priority” alerts every day should they even trust the risk score that is being used? An overwhelming number of alerts desensitizes the very people tasked with responding to them, leading to missed or ignored alerts or delayed responses. In this session we discuss our best strategies in the fight against alert fatigue and how to rebuild trust in security intelligence.

What you’ll learn:
In this session we discuss our best strategies in the fight against alert fatigue and how to rebuild trust in security intelligence.

Not All Risks are Equal - Why Context Matters in Cloud Security

Please join Orca Security for a dynamic discussion with Jonathan Jaffe, the CISO of Lemonade, one of the most successful and fastest-growing global insurance companies, and guest speaker Andras Cser, Vice President and Principal Analyst at Forrester, as we reveal the secrets to achieving high-speed growth while improving your security posture in the cloud.

We will explore the keys to building a high-growth cloud insurance business while ensuring security and compliance without compromise. 

Participants will learn:
How to leverage emerging cloud security technologies
Prioritizing risk using context-aware security
The keys to building trust between your DevOps and Security teams
Leveraging automation everywhere and anywhere
Sign up for this webinar (link) to gain actionable insights into how to achieve secure cloud operations in a hyper-growth company. 
 
And get ready to pose your toughest public cloud security and compliance questions to our expert panel.

Cloud Security Complexity and Agentless SideScanning Technology

Innovating at the Speed of Cloud without Compromising on Security and Compliance

The vendor landscape for cloud security and compliance solutions is crowded, diverse, and confusing. 

Join Director of Technical Product Marketing John Alexander as he breaks down the vendor landscape drawing on Orca and Analyst research, including Gartner’s recent Cool Vendors in Cloud Security Posture Management.

Then see a live demo of how Orca delivers workload and data protection, cloud security posture management, vulnerability management, and compliance management - all from a single SaaS platform.

CSPM, CWPP, CNAPP & CASB, Oh My!

Meet Justin Somaini, Chief Security Officer at Unity. Somaini is an expert in securing large environments having done stints as the CISO of Yahoo! and SAP. The scale of operations at Unity is even bigger as their games and experiences reach billions of devices a year, powered in large part by a massive Google Cloud Platform estate as well as multi-cloud.

Upon arriving at Unity, Somaini had a decision to make. Should he focus his initial efforts on preventative controls or on deep asset management with continuous risk assessments?

Somaini will be joined by Google’s Christopher Johnson and Orca Security’s Alaap Pandit as they invite you into a lively discussion on: 

- How to reduce time-to-remediation by coupling continuous cloud risk assessments with automation
- How deep cloud asset inventory and configuration management can unlock rich enterprise-wide capabilities
- How to eliminate friction between Security and DevOps teams and empower DevOps with ownership of and accountability for security issues
- Selection criteria for choosing a cloud security vendor, including the pros and cons of agent-based tools and scanners, CSPM (cloud security posture management), as well as a new category Gartner is calling Cloud-Native Application Protection Platform (CNAPP)

How Unity Uses Continuous Risk Assessment to Empower its Google Cloud Estate

Software developers are tasked with developing and releasing software at breakneck speed while security teams must have visibility into every workload that debuts to measure risk.  Cloud security teams can't be autonomous as they depend on developers to install security agents to give them that very workload visibility. What's more is that security teams are drowning in non-prioritized alerts with little to no context which results in fatigue and distrust. How do we expect developers to be able to interpret such information? It's a relationship fraught with friction right from the start.  Join me for an exploration of the challenge and some strategies we can leverage to reduce and even remove that friction entirely.

Friction Free DevOps - How to Secure and Govern Silently

Are you using agents, network scanners, or CSPM tools to detect risks across your public cloud estate?  If so, there’s a better way. Delivered as SaaS, Orca’s SideScanning technology reads your cloud configuration and workloads’ runtime block storage out-of-band, giving you cloud-wide, workload-deep security and compliance for AWS, Azure, and GCP - without the gaps in coverage, alert fatigue, and operational costs of agents.

Security leadership should attend this cast to see:

- Orca’s 5-minute onboarding process;
- The power of addressing the control plane and data plane at once;
- The scanning process for vulnerabilities, misconfigurations, malware, lateral movement risk, exploitable keys, weak passwords, and unsecured sensitive data;
-How to prioritize risk based on the underlying security issue, its accessibility, and blast radius.


About the Speaker:
Patrick is a serial startup technologist having played early and key roles in over six startups across four countries in the past 12 years including multiple cybersecurity and fintech companies. Previously, he worked as an independent consultant focused on infrastructure and integration projects in nearly every industry from national defense to agriculture. More recently, Patrick helped define the CSPM market as an early employee at Dome9 Security and is leveraging that experience at Orca Security to revolutionize how we think about and approach cloud workload protection.

Rapid7 InsightVM uses a combination of workload agents and network scanners. Both can assess vulnerabilities in workloads and containers, but only scanners can assess compliance. Rapid7 supports many compliance standards.

Our series lab represents a real-world cloud computing environment, but is smaller. It’s a single AWS VPC with EC2 instances, a container, and a load balancer. We leverage security groups, route tables, and an internet gateway to route traffic to our public subnets and workloads. In addition, we have private subnets with workloads having no internet access. Outside the VPC is a single S3 bucket.

In this comparison Orca rolled with the punches, providing near instant-on, one-time deployment and full coverage of virtual machines, containers, storage buckets, databases, and much more. Orca found risks pertaining lateral movement potential, poorly aging software, weak passwords, and much more.

Cloud Security Punch-Out! – Rapid7 InsightVM vs Orca Security

We’re excited to present another head-to-head bout, this time featuring Orca Security and Qualys Cloud Platform. Our Cloud Security Punch-Out series comprises short-form comparison videos pitting Orca Security against some of the world’s largest IT security brands. Each match includes a quick scenario overview followed by a review and comparison of each solution. This punch-out between Orca Security and Qualys Cloud Platform was done on August 3, 2020.

Cloud Security Punch-Out! — Orca Security vs Qualys Cloud Platform

In this presentation learn about:

- 5 risks hiding inside every public cloud estate
- How to get instant-on, workload-level visibility across 100% of your AWS, Azure, and GCP assets
- The power of addressing both the control plane and data plane at once
- Pros and cons of different cloud security tools: traditional agent-based tools and scanners, CWPP (cloud workload protection platforms), and CSPM (cloud security posture management)

How I got ‘X-ray and thermal vision’ across our public cloud infrastructure

Jack Roehrig, CISO at Turnitin, needed to improve security discipline and governance, close gaps, and reduce the potential attack surface. Yet he knew traditional agent-based security tools would miss high-risk aspects of his multi-cloud estate. 

Learn how Jack achieved 100% coverage and eliminated friction with DevOps by viewing this webinar replay.

How I Achieved Security Discipline and Governance Across AWS, Azure, and GCP

Security

Cloud Security

Cloud

Risk Assessment

Public Cloud

Cyber Attacks

Cloud Infrastructure

Security Awareness

Cloud Adoption

Welcome to the virtualization community on BrightTALK! Whether it affects servers, storage, networks, desktops or other parts of the data center, virtualization provides real benefits by reducing the resources needed for your
infrastructure and creating software-defined data center components. However, it can also complicate your infrastructure. Join this active community to learn best
practices for avoiding virtual machine sprawl and other common virtualization pitfalls as well as how you can make the most of your virtualization environment.

Virtualization

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

How I got ‘X-ray and thermal vision’ across our public cloud infrastructure

Presented by

About this talk

More from this channel