Complete Cloud Native Security Is Here

By Ron Harnik, senior product marketing manager, and Patrick Chang, senior director, product management

Prisma Cloud extends to workload protection and vulnerability management with Twistlock and PureSec

It’s a cliché at this point to open these blog posts with a line about how “enterprises are embracing the cloud.” Everybody knows that, and yes, I realize I just did it. Old habits die hard. Based on the now inevitable move to the cloud and countless conversations with our customers, Palo Alto Networks set out to create the most complete Cloud Native Security Platform in the industry. While we knew the importance of solving the needs of different business teams by offering a wide breadth of security capabilities (i.e. DevSecOps has different needs from SOC analysts), we also knew it would be crucial to make sure that everything we offer is best-in-class.

Starting about a year and a half ago, Palo Alto Networks made a series of strategic acquisitions: Evident.io, RedLock, Twistlock and PureSec. Each company’s products offer a set of unique capabilities in the world of cloud and application security. Today, we are incredibly excited to announce we are bringing all of these capabilities under one name, Prisma Cloud, the most complete Cloud Native Security Platform.  

How Does Prisma Cloud Help You?

Prisma Cloud includes the Cloud Security Posture Management (CSPM), Cloud Workload Protection Platform (CWPP) and Data Loss Prevention (DLP) capabilities already used by thousands of RedLock and Twistlock customers, now integrated into one platform. Customers can now use Prisma Cloud as a single pane of glass to secure their entire application lifecycle from build to deploy to run across IaaS, PaaS, network, storage, host, container and serverless.

Cloud Visibility

Prisma Cloud gives you a unified view of security and compliance posture across the application lifecycle and cloud environments. Shine a light on your organization’s cloud assets and know what you have, where you have it and how it affects your security posture, from Infrastructure-as-Code (IaC) tools such as Terraform, CloudFormation and Kubernetes YAMLs, to images in registries and cloud resources.  

Governance and Compliance

Prisma Cloud helps businesses meet government or industry-mandated compliance standards as well as custom compliance requirements with ease by generating one-click, audit read compliance reports and continuously monitoring all cloud services for misconfigurations.

Container, Serverless and Host Security

Protect workloads from build to run by detecting and preventing vulnerabilities in container images, functions, hosts and IaC templates. Actively defend applications with runtime protection, least-privilege microsegmentation and cloud native application and network firewalling, regardless of the underlying compute that powers them in hybrid or multicloud environments.

DevSecOps Enablement

Shift left by integrating security as early as possible in the application lifecycle. Prisma Cloud integrates with continuous integration (CI) and developer tools so you can implement safeguards that prevent vulnerable images, serverless functions and IaC templates from reaching deployment.

What’s New with Prisma Cloud?

With the latest release, Prisma Cloud introduces a slew of new features, but one thing is obvious at first glance. Prisma Cloud has a new look!

The first thing you might notice is that the navigation menu is now on the left, and is neatly collapsible so you can use all your screen real estate. The second thing is the addition of the Compute tab.

Clicking on the Compute tab will collapse the navigation menu and reveal the capabilities integrated from Twistlock and PureSec. Here are some of the features that will be included in this upcoming release:

How Can I Use Prisma Cloud?

With these latest additions, you can now implement a comprehensive cloud security strategy that caters to a wide variety of professionals, such as DevOps, DevSecOps, SecOps and cloud security architects, using a single platform. Customers can choose the subset of capabilities that matches their needs with Prisma Cloud’s different editions and deployment models. With all editions, different views can be configured to make sure each user only has access to what they need. For example, security analysts will have access to the Security Operations dashboards, where they can see alerts on misconfigured cloud services, while a DevOps engineer can access the Compute tab to deploy Defenders to secure hosts, containers and serverless. 

I Want to Try Prisma Cloud!

If you are an existing Prisma Cloud Enterprise Edition customer, the Compute tab (where you can access the CWPP capabilities from Twistlock and PureSec) will be automatically enabled in your Prisma Cloud tenant. The rollout of this capability to the Prisma Cloud customer base will start from mid-November 2019 and continue into December. When your tenant is enabled with the Compute tab, you will see a message pop up. Once you see the Compute tab, you can click on it, deploy Defenders in your hosts, containers and serverless environment and start securing those.

Please review the updated Prisma Cloud licensing requirements to understand how your usage of the Compute tab capabilities will be counted toward your Prisma Cloud licenses. If you’re not yet a customer, start a free trial of Prisma Cloud today!