Check Point CloudGuard Workload Protection

Overview:

Check Point CloudGuard Workload Protection, part of the CloudGuard Cloud Native Security platform, provides seamless vulnerability assessment, and delivers full protection of modern cloud workloads, including serverless functions and containers, from code to runtime – automating security with minimal overhead.

Automated Workload Protection

Check Point CloudGuard Workload Protection capability provides a comprehensive solution for automating security for the most demanding modern architectures- offering observability, least privilege protection, and active threat prevention across serverless, containers, and other microservices.

Workload Protection

Modern cloud-native application security, needs to be built from the ground-up with the inner workings of the application in mind. Traditional application security protocols simply do not work alone with these modern architectures as the mechanic of the application has fundamentally changed. Organizations need to reimagine the way AppSec is done without negatively affecting the operational benefits of these modern workloads like efficiency, cost savings, etc. 

From development through production, Check Point CloudGuard automates workload protection and offers continuous cloud security posture management and compliance with customizable policies (using GSL) across accounts. Only CloudGuard offers:

• Observability: Continuously scan your serverless functions, to increase security posture- providing clear observersability of the application and continuous assessment.
• Least Privilege Protection: Maximize workload protection through automatic least privilege protection for containers, logs, and databases.
• Active Threat Prevention: Zero-touch application security using pattern matching, whitelisting, blacklisting, and more applied at the function level for threat prevention.

Use Cases:

Container Security

Check Point CloudGuard automates container security and posture management- securing Kubernetes computing services and ensuring compliance with standards such as CIS Kubernetes Benchmarks or NIST 800-190. CloudGuard continuously scans the deployed container assets to identify misconfiguration issues that could jeopardize the applications security posture and compliance. From there, CloudGuard leverages auto-remediation technology for continuous security and compliance.

Serverless Security

Check Point CloudGuard automates serverless security while still empowering application developers to move at the speed of serverless. CloudGuard seamlessly applies behavioral defense, and least-privilege, to automatically protect serverless functions, with nearly no overhead in function performance. This ensures a continuous security posture, protecting the serverless functions from known and unknown attacks, while also meeting compliance and governance.

Documentation:

Download the Check Point Container Visibility Posture and Compliance Datasheet (PDF).