Public Relations

Launched Cloud Native Protector Service, which combines incident visualization functions that go beyond CSPM and CIEM.

October 13, 2022
Asgent, Inc.
(JASDAQ: 4288)

  Asgent Inc. (President & CEO: Takahiro Sugimoto, Tokyo), a provider of security solutions, has signed a distributor agreement with SkyHawk (CNP) Security Ltd. ^{※１※２※３}(Skyhawk Security Location: Israel, C. E. O: Chen Burshan, hereinafter referred to as "Skyhawk") and will start selling "Cloud Native Protector Service," which combines the basic functions of CSPM / CIEM and CTDR to visualize incidents.

Necessity of CSPM and CIEM in the Cloud and Incident Management

With the spread of the "cloud first" concept and the increase in remote work, many organizations are considering the introduction of cloud computing. While the cloud is easy to deploy and convenient in that it can be accessed from anywhere, it also has disadvantages such as the fact that management can become complicated due to the existence of multiple environments within an organization, and unauthorized access can easily occur due to inadequate settings since it can be accessed from anywhere. CSPM is a product that is being considered by many organizations as a solution to this problem. CSPM and CIEM check the cloud settings of public clouds such as AWS and Azure to ensure that there are no configuration errors or violations of various guidelines (ISMS, PCIDSS, etc.) required by the organization, and continuously check the cloud settings to ensure that they are in compliance. CIEM continuously checks the cloud settings for configuration errors and violations of the various guidelines (ISMS, PCIDSS, etc.) required by the organization, and notifies the client of any configuration errors that are found. CIEM, on the other hand, detects excessive authorization of cloud accounts and provides recommended policies based on the idea of minimum authorization.

CSPM and CIEM are useful as proactive measures to minimize risk by guiding the cloud to the correct configuration state, but they are not focused on detecting signs of an incident or responding to it after the fact. In the public cloud, as in the on-premises environment, it is necessary to detect the signs of an incident as quickly as possible, and when an incident such as an actual intrusion occurs, it is necessary to know who did what, where, and how to respond to the attack as quickly as possible. However, many CSPM vendors and public cloud solutions for incident and threat detection only detect a single event, which means that the time required to understand the entire incident can be significant.

Cloud Native Protector Service

Skyhawk Cloud Native Protector Service is a solution to solve these problems, which has CSPM and CIEM basic functions as well as CTDR function to detect and visualize incidents. Cloud Native Protector Service is a cloud security solution with CSPM and CIEM basic functions as well as CTDR function to detect and visualize incidents. When an incident is detected through correlation analysis of various logs in the public cloud, it visualizes the incident by presenting the entire incident flow (Figure 1), including when, who, and what kind of attack was carried out. This allows administrators to understand what has occurred on the cloud and take immediate countermeasures against the incident.

Cloud Native Protector Service can be deployed to maintain cloud security by performing both proactive measures (CSPM, CIEM) and post-incident measures (CTDR) in cloud security.

The Cloud Native Protector Service will be available for sale starting November 1, 2022. The service will be offered on a subscription basis, priced at approximately 5.9 million yen per year for 100 instances, with a target of selling 60 million yen in one year.

*1 CSPM: Cloud Security Posture Management
*2 CIEM: Cloud Infrastructure Entitlement Management
*3 CTDR: Cloud Threat Detection & Response

*Company and product names are the trademarks or registered trademark of the respective companies.