What is MVISION Cloud Native Application Protection Platform (CNAPP)?
Every enterprise is undergoing a digital transformation mandate. Most enterprises are leveraging the agility and innovation velocity of the public cloud, either solely or in conjunction with their private data centers. These enterprises need a simplified architecture; one that enables them to leapfrog the cost and complexity of the patchwork quilt of point products, and benefit from the cloud-native ecosystem, without major investments in tools or developer talent.
MVISION CNAPP – A Thought Leadership Perspective
McAfee MVISION CNAPP extends MVISION Cloud’s data protection – both Data Loss Prevention (DLP) and malware detection – threat prevention, governance, and compliance to comprehensively address the needs of this new cloud-native application world thereby improving security capabilities and reducing the Total Cost of Ownership (TCO) of cloud security.
Watch Video
Kaushik Narayan, CTO, McAfee Cloud BU
"EA’s business depends on the public cloud. We prefer a single unified security platform to implementing separate point products. The unified approach of MVISION CNAPP allows us to use fewer people to manage security risk across all our IaaS resources."
— Bob Fish, Enterprise Security Architect, Electronic Arts
Cloud Native Application Protection Platform:
5 Components
MVISION CNAPP brings application and data context to uniquely converge Cloud Security Posture Management (CSPM) for public cloud infrastructure, and Cloud Workload Protection (CWPP) to protect hosts and workloads including VMs, containers, and serverless functions. MVISION CNAPP provides five key capabilities:
Identify
Unique discovery of all workloads, data, and infrastructure across endpoints, networks, and cloud; prioritized based on risk.
Build & Deploy
Protect against configuration drift and provide vulnerability assessment across virtual machines, containers, and serverless environments. Unleash developer productivity through frictionless automation.
Runtime
Build policy based on zero trust, behavioral observation to eliminate false positives and achieve scale with known good behavior enforcement.
Operate
Empower the Security Operations Center (SOC) by mapping cloud-native threats to the MITRE ATT&CK framework for expedient remediation.
Protect
Automate security controls for continuous compliance and governance to ensure business continuity.
CWPP
Application Control with Allow listing, O/S hardening and FIM. Severity-based vulnerability scanning and protection for VMs and containers.
CSPM
Comprehensive discovery and risk-based prioritization. Shift Left to detect and correct misconfigurations and drift early in the CI/CD pipeline.
APPS & Data
Automate security controls for continuous compliance and audit. Automate identification and control of sensitive data. Enable UEBA.
