GLOBAL – November 06, 2026 -- A cloud security offering now covers the full path from infrastructure-as-code (IaC) templates to runtime protection of workloads, web applications and APIs, according to the product description.
Shift-left controls scan Terraform, CloudFormation, ARM and Kubernetes templates
The prevention layer identifies and fixes misconfigurations in IaC templates, including Terraform, CloudFormation, ARM and Kubernetes. It also finds exposed secrets across all files in repositories and CI/CD pipelines.
CI/CD pipelines are hardened to reduce the attack surface of the application development environment. Open-source vulnerabilities and license compliance issues are addressed through context-aware prioritization.
Posture management extends visibility to multicloud permissions, hosts and serverless
A second layer provides continuous visibility and control over misconfigurations, privileges, data and vulnerabilities across cloud environments. Users can monitor posture, detect and remediate risks, and maintain compliance.
Permission control spans multicloud environments. Scanning covers hosts, containers, Kubernetes and serverless workloads for vulnerabilities and threats. Sensitive-data identification and malware scanning apply to public cloud storage, while visibility extends to unknown, unmanaged cloud assets exposed to the internet.
Runtime protection targets zero-day attacks and anomalies across multicloud environments
The runtime layer offers real-time protection for cloud workloads, web applications and APIs. It detects advanced threats, zero-day attacks and anomalies across multicloud environments.
Container and Kubernetes security applies on any public or private cloud. Web application and API protection covers the same range of cloud deployments.