Bridgecrew Streamlines Infrastructure Security From Code to Cloud With New Developer-First Platform

Bridgecrew transforms how teams secure their public cloud by embedding infrastructure security earlier in development lifecycles. With new run-time and build-time integrations, Bridgecrew equips developers with automated fixes for cloud security issues—and delivers them as code.

Public Cloud Security Posture in Run-Time

Bridgecrew connects seamlessly to cloud environments with run-time scanning for AWS, Azure, and Google Cloud.

As teams expand their cloud footprints, Bridgecrew automatically identifies run-time issues that expose them to risk. But unlike compliance and reporting tools, Bridgecrew comes fully equipped with automated playbooks to correct misconfigured resources.

Recommended AI News: Pretected Reveals The Most Popular Cars In America For 2020

Infrastructure-as-Code and Workload Protection in Build-Time

Infrastructure-as-code allows teams to provision cloud workloads at scale, presenting both a challenge and opportunity when it comes to security. Bridgecrew helps teams keep infrastructure-as-code secure by scanning for issues in Kubernetes, Terraform, and AWS CloudFormation.

Bridgecrew also provides fixes at the infrastructure-as-code level—developers can open pull requests through version control system integrations with GitHub and Bitbucket or run code in their local environments.

Developer Ecosystem Integrations

In addition to providing cloud security posture visibility and automated remediations, Bridgecrew prevents cloud misconfigurations through CI/CD pipeline integrations with GitHub Actions, CircleCI, and Jenkins.

Teams get cloud security monitoring as part of every build, ensuring that misconfigurations aren’t unknowingly deployed. Ecosystem integrations with Jira, Splunk, and Slack provide real-time alerts where developers need them.

Recommended AI News: FourthWall Media Enhances Reveal Platform and Leaps to Cross-Platform Media Analytics

Community Support

Open-source software is key to Bridgecrew’s platform and its mission to advance the codified cloud security movement. Their engineering team supports community-led projects and develop their own tools:

• Checkov, a static analysis tool for infrastructure-as-code
• AirIAM, a least-privilege automation framework for AWS IAM
• TerraGoat, a “vulnerable-by-design” Terraform security training tool

Recommended AI News: Research Innovations, Inc. Wins Call Order to Deliver Advanced Data Analytics to the Department of Justice’s MLARS