News

The CSPM module in Cloud Advisor analyzes the entire network connectivity chain - including load balancers, NAT, public IP addresses, security groups, and other objects - to determine which resources are accessible from a wide range of external IP addresses. Now, to further verify public accessibility, the platform also performs external scanning: it connects to potentially open ports from outside and checks their actual status - whether the port is open or closed. This allows Cloud Advisor to identify publicly exposed applications - combinations of an IP address and an open port through which applications are accessible from the internet.

Cloud Advisor announces support for Cloud.ru Evolution, the new cloud platform from Cloud.ru. Cloud Advisor now enables organizations to secure their infrastructure regardless of which Cloud.ru platform they use to host their resources: Advanced, VMware Cloud, or Evolution.

Cloud Advisor now supports agentless discovery of private SSH keys stored in plaintext on virtual machines.

The new version of Cloud Advisor automatically monitors changes to files in Linux operating systems and files and the registry in Windows operating systems, including:

Cloud Advisor has expanded its list of supported operating systems. The full set of workload protection features (CWPP) is now available on virtual machines running:

Ensure your cloud infrastructure complies with internal rules using custom standards in Cloud Advisor. Automate compliance monitoring for corporate policies and regulations, and generate detailed reports for your management and auditors.

Cloud Advisor stores data about all resources, their properties and dependencies in a single graph database. This helps IT and security teams instantly get answers to any questions about the current state of the infrastructure. Previously, to find the necessary information, you had to write queries in GraphQL yourself, which was a barrier for many specialists. We have addressed this limitation with a new no-code tool.

The new version of Cloud Advisor includes scanning of virtual machines running Windows OS. The system now performs a comprehensive scanning of such VMs, checking key areas of information security:

The new version of Cloud Advisor offers enhanced capabilities for teamwork on security risks and cost optimization. We have added a feature to create tickets in Jira for resources, vulnerabilities, or specific alerts. The issue details and CSV attachment are immediately loaded into the task. This dramatically simplifies the process of creating tasks to resolve issues. Next, you can configure Jira yourself to monitor KPI performance for task resolution.

Cloud Advisor has released an update that adds support for federated identity. If your organization has a SAML-compliant user management system (such as Active Directory, Keycloak, or Google Workspace), you can use it to authenticate employees in Cloud Advisor. In this case, you don't need to create a new Cloud Advisor account for each employee in the company. If an employee leaves the company and is removed from the user management system, access to Cloud Advisor will be automatically revoked.

Cloud Advisor is a unified platform that analyzes all layers of cloud infrastructure, from cloud configuration and Kubernetes clusters to operating systems and software running on virtual machines and containers.

Cloud Advisor enhances the agentless scanner for virtual machines and containers. It now includes the following modules:

• NEW Secrets scanning
  NEW Patch management
  Vulnerabilities