Otterize automates workload IAM policies, focusing on zero-friction development and zero-trust security. The company provides continuous compliance for PCI.

Otterize

In today's high-stakes development environment, security has become a critical challenge, particularly for platform engineers. Identity management and access permissions are now the make-or-break safeguards for your organization's most sensitive data. But here's the catch: this responsibility heaps immense pressure on DevOps and platform engineering teams. They're expected to juggle intricate security, compliance, and privacy demands while keeping up the pace.

Now, enter Otterize—a Workload Identity and Access Management powerhouse designed to address this pressing issue head-on. We're talking about a declarative and zero-trust solution that revolutionizes access management, ensuring maximum security. With Otterize, organizations can finally untangle the web of network policy, AWS IAM, and database management complexities that threaten their data.

We don't just stop there. Otterize takes it up a notch, using your network traffic to craft zero-trust access policies that are tailored to your exact needs. We configure your existing infrastructure, establishing rock-solid network policies, IAM policies, and database ACLs. And we seamlessly integrate with your SDLC process, providing round-the-clock security monitoring during development and CI/CD. The result? Your security is strengthened with a DevOps-first approach, minimizing the potential fallout from any security breach.

So, when we say we've got a solution to this burning security issue, we mean it. With Otterize, you're not just protecting your data; you're securing your organization's future.

Jibe Ventures

Dig Ventures

Operator Partners

Vine Ventures

Index Ventures

Crew Capital

Artem Lajko ☁️ ⎈ of the German Hamburg Port Authority (HPA) Anstalt öffentlichen Rechts, using Otterize for automatic workload #Azure IAM, wrote an awesome walkthrough on how he automated bootstrapping new clusters and connecting them to Otterize as part of their CICD pipeline. Check it out!

PCI compliance + empowered developers? Turns out it can be done! Check Jack Kleeman's take on PCI compliance using network policies on Kubernetes 🎧➡️

𝗪𝗵𝗶𝗹𝗲 𝘆𝗼𝘂 𝗮𝗿𝗲 𝗿𝗲𝗮𝗱𝗶𝗻𝗴 𝘁𝗵𝗶𝘀, 𝗜 𝗮𝗹𝗿𝗲𝗮𝗱𝘆 𝗰𝗼𝗻𝗻𝗲𝗰𝘁𝗲𝗱 𝗞𝘂𝗯𝗲𝗿𝗻𝗲𝘁𝗲𝘀 𝘁𝗼 𝗔𝗪𝗦 𝗦𝗲𝗰𝘂𝗿𝗲𝗹𝘆!
The current process for establishing a secure connection between Kubernetes and AWS is unnecessarily complex and error-prone. It's a multi-step dance between two different systems that can easily fall out of sync.

Let's break down what's required to connect a single pod to an S3 bucket:

𝗪𝗶𝘁𝗵𝗼𝘂𝘁 𝗢𝘁𝘁𝗲𝗿𝗶𝘇𝗲:
- In Kubernetes: Create a service account for the pod
- In AWS: Set up an IAM role
- In AWS: Establish a trust relationship between the IAM role and the service account
- Back in Kubernetes: Annotate the service account with IAM role details
- Return to AWS: Configure the IAM policy for S3 bucket access

This back-and-forth between platforms is not only time-consuming but also increases the risk of misconfigurations. One small mistake in this intricate process can lead to #security vulnerabilities or access issues.

𝗡𝗼𝘄, 𝗹𝗲𝘁'𝘀 𝗹𝗼𝗼𝗸 𝗮𝘁 𝘁𝗵𝗲 𝗢𝘁𝘁𝗲𝗿𝗶𝘇𝗲 𝗮𝗽𝗽𝗿𝗼𝗮𝗰𝗵:
In Kubernetes: Create a ClientIntents file
That's the entire process. One step, one platform.

This streamlined approach significantly reduces complexity and the potential for errors. It's not just about fewer steps; it's about a more maintainable and secure system. 

By consolidating the process into a single action within #Kubernetes, Otterize eliminates the risk of inconsistencies between platforms and simplifies troubleshooting.

Simplifying IAM rule creation for AWS. IAM creation can be difficult, even harder to troubleshoot, but is often cited as the source for cloud misconfigurations. It'd be great if there was an easier way to create IAM rules wouldn't it?

#AWS #CloudSecurity #CloudNative #IAM #IBAC

Who's coming to ContainerDays? 😄

#Otterize #Kubernetes #CloudNative

Thanks for including us, Is It Observable! 🦦

#Otterize #Kubernetes #CloudNative #K8s

Is security a blocker that's slowing down innovation, or insurance against the risk of reputational damage?

#CloudNative #Security #SoftwareDevelopment #Kubernetes #Otterize

Integrating Envoy proxy metrics from Istio into intent based access controls. This simplifies the work you need to do as you can auto-discovery the required network rules and create layer 7 controls.

#Envoy #Istio #CloudSecurity #ZeroTrust #NetworkSecurity #CloudNative #Kubernetes

New feature drooooop. 🫳🏼

🕸️ Cross-cluster Access Graph: See multiple clusters in one view, and gain visibility into connections between services in different clusters. To enable, just upgrade your deployment of Otterize, no additional configuration required! See it in action in the image below. 

🔒 Cloud Security & Blast Radius Analysis: A new Cloud Security view has been added, which includes the Workload Inventory, Resource Inventory, and Findings view. The Inventory shows you workloads and resources (e.g. S3 buckets) in your clusters—the same information in the access graph, but in table view, allowing you to sort by various properties, such as whether they are blocked.

Blast Radius Analysis: You can tag workloads and resources as Sensitive. A Sensitive workload or resource is validated to see that it is only accessed (both directly, indirectly, and across clusters and the Internet) by workloads that are also tagged Sensitive, otherwise a Finding is generated. On the access graph, you can see these Findings as yellow exclamation marks ⚠️, helping you find unintentional access to sensitive resources. 

Try it out by tagging a workload as Sensitive →  
https://lnkd.in/d2e6MeHP

Coming soon: Validations and automated remediation for achieving zero-trust and various compliance frameworks, such as PCI DSS or ISO 27001. 

🐘 PostgreSQL Integration: The PostgreSQL integration is now fully open source and does not require Otterize Cloud to function! Automatically control just-in-time access to your database, including automated credential rotation. 

Try it out → https://lnkd.in/dRGyXGyb

👀 MySQL Integration: An integration for MySQL is now available! Similar to the PostgreSQL integration, control JIT access to the database and automatically rotate credentials. 

Check it out → https://lnkd.in/dsVnWEGi

💬 Slack Integration: Otterize Cloud is now able to send Slack alerts when new traffic that is not covered by ClientIntents, and is blocked as a result, is detected. 

Create a Slack integration on the Integrations page →
https://lnkd.in/dbXtWaF2

🦊 GitLab Integration: The GitLab integration joins the GitHub integration. It watches your clusters for traffic that is not covered by ClientIntents, and is blocked as a result (or would be blocked, if in shadow mode), and automatically submits a Merge Request to update the ClientIntents, enabling developers to not have to think about access control at all!

Want to chat or learn more about any of the above features? Just comment below + we'll reach out! 👇🏼

#Otterize #Kubernetes #CloudNative #PCI #PostgreSQL #MySQL #Slack #GitLab #CNCF #K8s

Mirror, mirror on the wall... 🪞

#Otterize #CNCF #K8s

COM:OTTERIZE

Otterize

Analysis Not Available