Cavirin Security Solution on AWS

Cloud security starts by building a “First Line of Defense," ensuring robust configurations of your key infrastructure and platform services. Cavirin has researched the industry (e.g., CIS, NIST, PCI, GDPR, and cloud provider recommendations) and packaged one-click policies to fortify cloud assets. The policies enforce important access controls, data protection measures (encryption and privileged access), boundary controls, audits, and monitoring. Organizations start with one-click policies and continue their cloud security journey with our full Cyberposture Intelligence platform, enabling continuous IT health through real-time monitoring, threat detection, and one-click remediation.

Cavirin is an AWS Advanced Technology Partner and has achieved the AWS Security Competency.
View AWS Partner profile »

Build your "First Line of Defense" with Cavirin's easy, one-click policies:

• Actionable reports: Access patent pending scoring that provides a prioritized list of fixes with specific steps to remediate
  
• Custom and configurable policies: Extend checks to organization specific policies and build your own policies
  
• Secure Compute: Extend checks beyond AWS services to OS level and container ecosystems such as Docker and Kubernetes
  
• AWS cloud monitoring: Manage resource and configuration changes in real time
  
• GuardDuty: Incorporate threat vectors into cyberposture

The customer is a working capital marketplace, that seamlessly matches Account Receivables with Account Payables to turn receivables into cash flow and payables into income. Their customers, due to sensitive financial data, demand rigorous compliance and cloud security posture management. The solution spans hybrid environments consuming varied IaaS, PaaS, OSs, and containers resources.

Deployed on AWS, Cavirin’s “First Line of Defense” with one-click policies (SOC2, NIST, GDPR, etc.) are used to scan and fix misconfigurations across IaaS, PaaS, and container services. Cavirin’s platform will be used for OS config checks next.

The client was able to simplify security and compliance using Cavirin as a single-pane of glass to discover resources, scan against benchmarks, and fix misconfigurations. The company has been able to provide valuable technical evidence to audit.