What is MVISION Cloud Native Application Protection Platform (CNAPP)?
Every enterprise is undergoing a digital transformation mandate. Most enterprises are leveraging the agility and innovation velocity of the public cloud, either solely or in conjunction with their private data centers. These enterprises need a simplified architecture; one that enables them to leapfrog the cost and complexity of the patchwork quilt of point products, and benefit from the cloud-native ecosystem, without major investments in tools or developer talent.
Cloud Native Application Protection Platform:
5 Components
MVISION CNAPP brings application and data context to uniquely converge Cloud Security Posture Management (CSPM) for public cloud infrastructure, and Cloud Workload Protection (CWPP) to protect hosts and workloads including VMs, containers, and serverless functions. MVISION CNAPP provides five key capabilities:
Identify
Unique discovery of all workloads, data, and infrastructure across endpoints, networks, and cloud; prioritized based on risk.
Build & Deploy
Protect against configuration drift and provide vulnerability assessment across virtual machines, containers, and serverless environments. Unleash developer productivity through frictionless automation.
Runtime
Build policy based on zero trust, behavioral observation to eliminate false positives and achieve scale with known good behavior enforcement.
Operate
Empower the Security Operations Center (SOC) by mapping cloud-native threats to the MITRE ATT&CK framework for expedient remediation.
Protect
Automate security controls for continuous compliance and governance to ensure business continuity.
CWPP
Application Control with Allow listing, O/S hardening and FIM. Severity-based vulnerability scanning and protection for VMs and containers.
CSPM
Comprehensive discovery and risk-based prioritization. Shift Left to detect and correct misconfigurations and drift early in the CI/CD pipeline.
APPS & Data
Automate security controls for continuous compliance and audit. Automate identification and control of sensitive data. Enable UEBA.