Cloud.ru has launched the Evolution Protection Platform, its own Cloud-Native Application Protection Platform (CNAPP) aimed at uncovering dangerous cloud misconfigurations that can lead to security incidents.
Common risks addressed by the platform include public storage containing private data, overly permissive service accounts, and virtual machines accessible from the internet without justification. The solution is currently undergoing closed testing with major Russian enterprises.
CSPM Capabilities
The CSPM module handles configuration verification. Whenever cloud service settings are modified, the platform refreshes its data and executes relevant checks entirely within the Cloud.ru Evolution environment, eliminating the need for agent installation on virtual machines.
Users may leverage ready-made rule collections or define custom policies, such as prohibiting public IP addresses for development environment instances. Findings are presented directly in the cloud platform interface, while notifications can be sent by email or forwarded to operational tools through APIs and webhooks.
Current and Planned Features
The present version already includes security assessments for AI agents created using Cloud.ru Evolution products. Planned capabilities encompass DSPM for confidential data detection, vulnerability scanning of virtual machines and containers, and an AI assistant for risk prioritization.


