The company integrates Singularity™ Cloud Workload Security with Snyk's Developer Security Platform, helping customers protect cloud-native apps from creation to deployment
The challenge for software developers is prioritizing which vulnerabilities to fix, and the complexity of modern applications and software supply chains has made this more difficult. SentinelOne (NYSE: S), a global leader in AI-powered cybersecurity, partners with Snyk, the industry leader in developer security, to solve the problem. The company announced the integration of Singularity Cloud Workload Security, its real-time protection platform for cloud workloads (CWPP), with the Developer Security Platform di Snyk.
The integration will correlate run-time cloud threat detections identified by SentinelOne with vulnerabilities discovered by Snyk in container files, allowing cloud security, app security and developer teams to collaborate more effectively and eliminate the root cause of issues. The integration improvements will also provide security teams with the means to manage cloud application risks, further expanding SentinelOne and Snyk's joint code-to-cloud context, which in turn will simplify prioritization and remediation of issues.
“Developers are always under pressure to build apps faster, but they also need to collaborate with internal teams to ensure application security in both build-time and run-time environments,” he said Ely Kahn, Vice President, Product Management for Cloud Security and AI/ML di SentinelOne. “The integration between SentinelOne and Snyk provides consolidated visibility into vulnerabilities and threats across both platforms that allows customers to better assess container security risks and target interventions to address them.”
Have a complete picture
Security teams have visibility into threats at the run-time level, but lack context when it comes to vulnerabilities in container code and files. In contrast, developers know about code and build-time vulnerabilities, but not about run-time threats and distributed environments. These two different visions must be integrated into the application lifecycle, so that problems can be eliminated quickly and neither team wastes time on matters of little importance.
Contextualize events
SentinelOne's Singularity Cloud Workload Security solution detects run-time threats, including ransomware, zero-day exploits, and fileless attacks, in real-time and automates response actions. Snyk helps developers find, prioritize, and fix vulnerabilities in their applications. By combining the two, security and application developers can now:
- Automatically correlate container vulnerabilities discovered by Snyk at compile time to run-time threats in SentinelOne, so CloudSec, AppSec, and developers can work together to find and fix vulnerabilities.
- Quickly identify the root cause of run-time threats associated with container images by identifying exploitable vulnerabilities associated with them.
- Remedy the root cause of threats at their source.
- Proactively scan for threats and automate response actions to stop their spread.
- Leverage continuous feedback and monitoring to prevent vulnerabilities from reaching production and verify run-time misconfigurations to create a more secure production environment.
“As software supply chains grow in complexity, development and security teams need as much context as possible to effectively address risks,” said Sarit Kozokin, VP of Product Management at Snyk. “Together, Snyk and SentinelOne provide complete visibility from code to the cloud, allowing companies to gain greater control and visibility over their security programs, making it easier to manage and scale developer security initiatives.”
