Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Keith Mokris
Orca Security: A Leader in the GigaOm Radar Report for CSPM
Today’s security leaders face a diverse set of challenges in the cloud. Their teams are responsible for preventing data breaches, ensuring identity and access is managed properly, protecting PII, and managing vulnerabilities – just to name a few of the top concerns. Simultaneously, security teams are faced with navigating a complexity of new cloud security requirements.
4 Reasons to Shift Left and Add Security Earlier in the SDLC Original
Keith Mokris Keith Mokris, VP of product marketing at Orca Security, is a cloud security expert with expertise in secure software development. Keith focuses on cloud security for cloud native and multicloud environments through integration of CNAPP technology. Agility and flexibility are the hallmarks of a modern, cloud native tech stack that can handle complex digital transformation initiatives, from built to production.
Why Agent-based Security Fails in Rapid Response Scenarios
Cloud platform and security teams are well-aware of the challenges in swiftly responding to new vulnerabilities and zero-day threats. There are countless examples just in the past year of major threats that impacted cloud environments and applications and required rapid responses, including: Log4Shell: Multiple critical CVEs and attack vectors were identified in the popular Log4j framework, requiring teams to identify all vulnerable applications and apply patches to several updated versions.
Orca's Platform is Context-Aware, Shift Left Security
Cloud-native applications, built on architectures like containers and Kubernetes, are composed of many interconnected microservices that run on cloud infrastructure. And these architectures continue to rise in adoption. According to the Cloud Native Computing Foundation (CNCF), 96% of organizations are currently using or evaluating the use of Kubernetes.
4 Ways to See Orca Security at RSA Conference 2022
At Orca Security, we’re proud to engage with customers, partners, and the cybersecurity community to make the cloud a safer, more secure place for the world.
Managing Cloud Risks By Giving Team Metrics
Modern enterprises are robust and complex, with many distributed teams responsible for configuring cloud environments, building and deploying applications, and managing risk. While security leadership wants to ensure they have a global view into their entire cloud footprint, individual teams or business units have their own goals, responsibilities, and metrics.
Prevent Container Risks With Advanced Container Image Sandboxing
Developers and DevOps Teams Can Now Use Prisma Cloud’s Advanced Machine Learning to Prevent Dynamic Threats Before They are Deployed Into Operational Environments Today’s high speed deployments in a DevOps world rely on the efficient reuse of image libraries and the increasing usage of container images. Developers and DevOps teams regularly pull images from third-party registries to run in their corporate environments.
Prisma Cloud Further Extends Host and Container Security
Prisma Cloud Now Secures Apps with the Industry’s Only Integrated Web App Firewall (WAF), API Security, Runtime Protection and Bot Defense Platform We’re proud to announce our next set of developments for workloads for Prisma Cloud, which will help to bolster host and container security for our customers.
Prisma Cloud 2.0: The Industry’s Most Comprehensive CNSP
With the rollout of Prisma Cloud in November 2019, Palo Alto Networks announced a new category in cloud security – the Cloud Native Security Platform (CNSP) – for securing cloud native applications. Today, our release of Prisma Cloud 2.0 presents an evolution in the space with four new functionality modules and further platform alignment with key user needs and market categories.
DevOps and Security in a Cloud-Native World
DevOps teams have naturally embraced microservices and modern application delivery workflows. But, they may get pushback from risk-averse leadership or feel slowed by security teams who struggle to keep pace. Development teams that play a greater role in guiding their organization’s cloud transformations will ultimately come out ahead.
Gartner Market Guide for Cloud Workload Protection Platforms
Cloud native development relies on workloads spread across any number of compute options – virtual machines (VMs), containers, serverless and many points in between. These components which make up cloud native applications can be created and spun down in a matter of hours or even minutes – they are surprisingly ephemeral. Moreover, protecting these workloads can be difficult.
Using a Full Lifecycle Approach to Secure Cloud Native Applications
Security professionals are being deluged by a profusion of tools – there seem to be point tools for nearly every single issue. Thankfully, there are platforms that smartly package these tools into more comprehensive solutions. The trend many are seeing now, though, is that these platforms have so far only focused on certain parts of the software development lifecycle. What many security teams need are simpler, full lifecycle approaches to secure cloud native applications.
Highlighting the Latest Compute Security Capabilities in Prisma Cloud
Last month, we announced the latest release of Prisma Cloud, a comprehensive Cloud Native Security Platform (CNSP). You can find the details in our launch blog, “Prisma Cloud Native Security Platform Embeds Security into DevOps Lifecycle.” In this blog post, we take a deeper dive into the new Compute Security capabilities that are available as part of our latest Prisma Cloud release.
Container Security: Vulnerability Management from Build to Run
Author: Keith Mokris, Product Marketing Manager, Container Security Today’s enterprises have embraced containers for their simplicity and contribution to improved development velocity. While developers and devops enjoy this new-found speed to deliver software and value to customers more quickly, security teams are looking to ensure container pipelines are secure and improve the risk posture of applications when they are deployed.
2019 Gartner Market Guide for CWPP: What You Need to Know
Application Security Apr 25, 2019 Gartner released its April 2019 Market Guide for Cloud Workload Protection Platforms, which focuses on emerging trends in cloud native infrastructure and how organizations should secure VMs, containers, and serverless workloads. In the report, Gartner acknowledges Twistlock as a Representative Vendor for Cloud Workload Protection Platforms.* Download now: The full Gartner report is available on the Twistlock website here.
Forrester Now Tech: Software Composition Analysis Q1, 2019: Key Takeaways
Container Security Jan 24, 2019 At Twistlock, we have continually discussed the need to manage and prioritize risk in containerized applications. Pipeline management is certainly a challenge for today’s enterprises–especially when they potentially have 100,000 images and containers being used by hundreds or thousands of developers.
Cloud Native Security Intelligence: Integrating with AWS Security Hub
This week at AWS Re:Invent 2018, Amazon Web Services announced a solution for aggregating application intelligence data and security alerts in central dashboard called AWS Security Hub. At Twistlock, we’re focused on being a full stack and full lifecycle solution to protect cloud native applications and are proud to announce our integration with the now-public AWS Security Hub.
Securing Containers on Oracle Cloud Infrastructure
Leading enterprises continue to adopt containers and Kubernetes at a growing pace because container technology provides developers with scalability and portability. According to statistics from a recent survey led by The New Stack, “Sixty-nine percent of organizations surveyed by CNCF use Kubernetes to manage containers.”1 Infrastructure and operations teams continue to rely on Kubernetes to manage their cloud native applications.
DevSecOps Meets GitOps with Twistlock and Weaveworks
Today’s development and devops teams are using containers to build and deploy software faster than ever before. In a recent 2018 DZone Guide to Containers: Development and Management, 77 percent of respondents cited faster development as a top benefit of leveraging containers at their organization. With this ability to implement faster development, also comes a need to properly configure, manage, and secure containers and microservices.
Container Security, Q4 2018
Recently, Forrester published its Now Tech: Container Security, Q4 2018 report that looks at trends in container adoption, core security requirements for securing containers, and an overview of the container security market landscape. Forrester recognizes Twistlock as a Container Security Platform based on required capabilities.1 Download now: The full report is available for download via the Twistlock website here.
What to Know: Gartner’s Security Considerations and Best Practices for Securing Serverless PaaS
Recently, Gartner released its September 2018 Security Considerations and Best Practices for Securing Serverless PaaS, which focuses on enterprise adoption of serverless platforms and how this impacts enterprise security.
Why Legacy Security Practices are Incompatible with DevSecOps
As DevOps (which means the unification of development and operations) continues to sweep the software industry, many organizations are questioning how they can operate more efficiently. Where can we save time? How can we increase (or, at the very least, maintain) software quality on a development schedule that seemingly gets tighter and tighter with each subsequent release?
Gartner Market Guide for Cloud Workload Protection Platforms
Last week, Gartner released its 2018 Market Guide for Cloud Workload Protection Platforms (CWPP), which highlights trends in cloud security, recommendations for securing cloud workloads, and details about specific vendors addressing the needs around containers, cloud native applications, and serverless applications — Twistlock is proud to be listed specifically as a “container-focused” vendor for the second year in a row.
Defining the Spectrum of Cloud Deployment Technology
“Cloud computing” and cloud deployment have been a catch-all phrase over the past decade to describe anything that’s a shift away from hardware servers. However, the term has become nebulous in recent times with the growing diversity in how many different ways you can leverage the cloud. We’ve come far from a simplistic separation between on-premises and cloud. Today, it’s about on-premises versus a range of different cloud options.
Continuum of Cloud Native Technologies [VM to Severless] Pt 2
This is part two of The Continuum of Cloud Native Topologies blog. Check out part one here, and get your copy of the full ebook here. Containers deliver all three cloud native technology system characteristics and provide a balanced set of capabilities and tradeoffs across the continuum. Popularized and best known by the Docker project, containers have existed in various forms for many years, and have their roots in technologies like Solaris Zones and BSD Jails.
Integrating Service Mesh to Enterprise Security & Computing
By now, you may have. Service meshes are becoming an increasingly important part of the container conversation.This article offers a brief overview of what service meshes do, then dives into what they mean for your enterprise’s security. The Connection Problem To understand why service meshes exist, you have to start by thinking about network connections within container environments. Consider what happens when you’re running an application that’s native to the cloud.
The Value of Cloud Native Security for Your Business
“Software is eating the world,” Marc Andreessen wrote in 2011. Five years later, the venture firm adjusted its thesis to “software programs the world,” a new vision it attributed to the trajectory of past and current technology shifts. Andreessen was right. Today, the KPI for a successful business is producing scalable, highly available global software with a competitive time to market.
Enhance Visibility & Accuracy for Container Vulnerability Management
Earlier this year, I was at a large industry event and ended up speaking with a devops lead at a software company related to the social media space. The company, which has both a thriving B2C business and B2B business, leverages containers for most of their internal and external applications. The engineer I was talking to works with dozens of developers on individual application teams to make sure their modern web and mobile applications are built and deployed successfully.
Twistlock 2018 Predictions: Security as a Primary Focus | Twistlock
From political scandals, to the Equifax breach and WannaCry hack, no industry was left unscathed from hackers on a mission in 2017. It’s no doubt that security was top of mind for all organizations this year — if it wasn’t already. In 2018, companies will rethink their security strategy and implement new tactics and measures in order to better protect themselves.
OWASP Top 10 Application Security Risks | Secure Containers w/Twistlock
At Twistlock, we continue to work with enterprises and leading startups taking advantage of the benefits of running their applications on containers or serverless architecture. Developers, devops engineers, and enterprise architects are designing applications to run on containers from the ground up, as well as migrating legacy applications to containers using a lift and shift approach. But, what about security?
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Keith
Contact Keith, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack