Cloud.ru Unveils Evolution Protection Platform for Detecting Cloud Misconfigurations

Cloud.ru has introduced its Evolution Protection Platform, a Cloud-Native Application Protection Platform (CNAPP) designed to identify risky configurations in cloud environments. The solution targets issues such as public storage buckets containing private data, excessive permissions on service accounts, and virtual machines with unnecessary internet exposure. A dedicated CSPM module continuously monitors configuration changes and runs automated checks without requiring agents on virtual machines. Organizations can apply predefined rule sets or build custom policies, with results accessible through the cloud platform interface and alerts delivered via email, APIs, or webhooks. The current release also incorporates security checks for AI agents built on Cloud.ru Evolution products. Additional features including DSPM for sensitive data discovery, vulnerability scanning for VMs and containers, and an AI risk prioritization assistant remain in development.

AntiMalwareTranslated from Russian

Read at source

Cloud.ru has launched the Evolution Protection Platform, its own Cloud-Native Application Protection Platform (CNAPP) aimed at uncovering dangerous cloud misconfigurations that can lead to security incidents.

Common risks addressed by the platform include public storage containing private data, overly permissive service accounts, and virtual machines accessible from the internet without justification. The solution is currently undergoing closed testing with major Russian enterprises.

CSPM Capabilities

The CSPM module handles configuration verification. Whenever cloud service settings are modified, the platform refreshes its data and executes relevant checks entirely within the Cloud.ru Evolution environment, eliminating the need for agent installation on virtual machines.

Users may leverage ready-made rule collections or define custom policies, such as prohibiting public IP addresses for development environment instances. Findings are presented directly in the cloud platform interface, while notifications can be sent by email or forwarded to operational tools through APIs and webhooks.

Current and Planned Features

The present version already includes security assessments for AI agents created using Cloud.ru Evolution products. Planned capabilities encompass DSPM for confidential data detection, vulnerability scanning of virtual machines and containers, and an AI assistant for risk prioritization.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in Other

Mail.ru Reduces Lifetime 1TB Cloud Storage Promo to Standard 8GB Quota for Select Users
Kimi K3 Open Model Surpasses Closed AI Leaders with Million-Token Context and 896 Experts
Innostage Completes Functional Testing of PT NGFW 1.10.3 Across 156 Criteria