A security company introduces new cloud security capabilities that provide full visibility into potential attack paths from endpoint to cloud, instantly protecting vulnerable cloud workloads as they are created and executed.
The 1-Click XDR feature automatically identifies and secures unprotected cloud workloads by instantly deploying the CrowdStrike Falcon agent. These agent-based and agentless innovations enable customers to consolidate multiple cloud security products into a single, unified platform for comprehensive protection across the cloud lifecycle.
According to the 2023 CrowdStrike Global Threat Report, cloud exploitation cases have increased by 95%, more than a third (36%) of cloud environments had insecure default cloud service provider settings and the cases where threat actors specifically exhibited targeting cloud environments has nearly tripled. To help organizations prevent endpoint-to-cloud attacks, CrowdStrike has added Falcon Cloud Security to its industry-leading platform.
Managed Services
CrowdStrike Falcon Cloud Security includes the market-leading Cloud Native Application Protection Platform (CNAPP) capabilities that integrate Cloud Workload Protection (CWP), Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), and container security—all in a single platform , which is complemented by market-leading managed services.
"Enterprises clearly need complete visibility and protection for cloud workloads, regardless of where they exist," said Raj Rajamani, chief product officer, DICE at CrowdStrike. “Prevention of compromise requires tight, native integration of agent-based and agentless capabilities across CWP, CSPM, and CIEM to prevent both attacks and human error. CrowdStrike's latest innovations enable DevSecOps teams to proactively address attacker behavior, identify and protect unprotected cloud workloads with a single click, and use snapshots to maintain visibility and protection when an asset cannot support an agent.”
“As a cloud provider specializing in the development of GPU-intensive applications such as generative AI, we need a partner to help us ensure our infrastructure is secure and that we have visibility into the applications we are running said Matt Bellingeri, CoreWeave CISO and CrowdStrike Falcon Security customer. “It's extremely important for us to have both agent-based and agentless capabilities on the same platform. CrowdStrike gives us a high level of confidence in our security without sacrificing performance. CrowdStrike gives us visibility into all of our assets — including endpoints, cloud nodes, installed applications, running processes, and more.”
Falcon Cloud Security
- 1-Click XDR: Enterprises can scan their cloud environment with native agentless visibility to identify unprotected workloads and automatically deploy the CrowdStrike Falcon agent for end-to-end runtime protection.
- Agentless snapshot scanning: When an agent cannot be installed, organizations can gain full insight into the risks of cloud workloads by detecting vulnerabilities and installed applications - for example, with the support of AWS
- Full Cloud Attack Path Visualization: Organizations gain a unified view of the attack path, from host to cloud, to detect, prevent, and remediate cloud threats without the limitations of multiple consoles and agents.
- Additional updates: Updated compliance dashboard (now supporting CIS, NIST, PCI, SOC2 and custom frameworks), new infrastructure as code (IaC) security and integrated Kubernetes admission controller.
About CrowdStrike CrowdStrike Inc., a global leader in cybersecurity, is redefining security in the cloud age with its completely redesigned platform for protecting workloads and devices. The lean single-agent architecture of the CrowdStrike Falcon® platform uses cloud-scaled artificial intelligence and ensures protection and transparency across the company. This prevents attacks on end devices both inside and outside the network. With the help of the company's own CrowdStrike Threat Graph®, CrowdStrike Falcon correlates around 1 trillion endpoint-related events worldwide every day and in real time. This makes the CrowdStrike Falcon platform one of the world's most advanced data platforms for cybersecurity.