Identity company CyberArk has partnered with cloud security provider Wiz to strengthen its multi-cloud security posture with best-in-class visibility and control over privileged human and machine access without impacting the speed and scale of cloud development.
A central component of the partnership is an integration between the CyberArk Identity Security Platform and the Wiz Cloud Security Platform.
By combining Wiz’s capabilities for discovering toxic combinations of critical risks and misconfigured cloud access with CyberArk’s capabilities for implementing Zero Standing Privileges, cloud security teams can measurably reduce the risk of unauthorised access and rapidly satisfy audit and compliance requirements. As part of the partnership, CyberArk is joining the Wiz Integration Network (WIN) and Wiz is joining the CyberArk C3 Alliance.
“By combining Wiz’s ability to analyse cloud entitlements with CyberArk’s ability to enforce dynamic privilege controls to all identities, we are enabling our customers to scale their cloud operations while ensuring that privileged access is identified and fully controlled across their multi-cloud environments,” said Wiz’s Oron Noah.
Cloud-native organisations with extensive multi-cloud environments are facing rapidly changing new environments and exponentially more identities, creating circumstances that are challenging for traditional security approaches. The lack of visibility and inability to manage the privileged access that developers often grant themselves results in greater vulnerability, risk and compliance issues.
“Cloud development is a primary driver of vast numbers of new human and machine identities that are being created every day, by different siloes within the organisation and with differing, often unmanaged, permissions and access levels,” said CyberArk’s Chief Strategy Officer.
“For security teams to keep up, there is a need to rethink our approach to how these identities are discovered and secured so that this significant attack surface is understood and can be acted on,” he added. “Together, CyberArk and Wiz provide this visibility, securing every identity in the cloud with Zero Standing Priviliges and at cloud velocity.”
“Organisations like Encova have thousands of entitlements and permissions across their cloud environments,” said Encova CISO Tony DeAngelo. “Visibility of excessive permissions and the extent of privileged access in these environments is often difficult to ascertain, creating not only unquantified security risk but also operational inefficiencies.”
“The Wiz and CyberArk integration is a positive step that will allow security teams to gain insight into risky cloud access and use that knowledge to enhance identity security for IT, CloudOps, developer and machine identities, which are often highly privileged.”
