DivvyCloud now offers full lifecycle cloud security and compliance. The new IaC Security feature shifts DivvyCloud’s security & compliance policies left into the CI/CD pipeline, allowing security professionals to evaluate the risk of Infrastructure as Code (IaC) templates before they are built.
By solving problems in the IaC template, security professionals stop problems from ever happening and improve efficiency by correcting issues once rather than repeatedly fixing them at runtime.
Engaging developers in the cloud security process earlier in the CI/CD pipeline (DevSecOps) reduces friction related to security, speeding up developer efforts, making them more likely to participate, and, therefore, improving security.
Consistent, unified policy enforcement across AWS, Azure, and GCP.
Combine IaC plan and robust understanding of cloud environments to identify risk.
Use existing DivvyCloud policies and scope these by application.
Works with any CI/CD pipeline including Jenkins, CircleCI, Travis CI, Azure Pipelines, etc.
Choose to warn or fail a build based on policy violation criticality.
By shifting left, security professionals can prevent misconfigurations and policy violations from occurring and deliver better experiences to developers. The result: improved cloud security and improved developer productivity.
As with all DivvyCloud protection, you can immediately evaluate your build process against our hundreds of out-of-box policies that map to compliance and industry standards, including PCI DSS, HIPAA, GDPR, SOC 2, ISO 27001, CIS Benchmarks for AWS, GCP, Azure, and Kubernetes, NIST CSF, NIST 800-53, FedRAMP CCM, and CSA CCM.