Datadog announced Compliance Monitoring, a new product that can identify misconfigurations that cause compliance drift as soon as they occur.
Once problems are identified, Datadog Compliance Monitoring immediately notifies engineers, enabling them to proactively remediate any issues.
The increasing adoption of cloud platforms has resulted in a proliferation of new security risks: from compliance-sensitive workloads on public clouds that are deployed before security tooling can detect them, to developers and automated configuration tools accidentally misconfiguring a service that opens security vulnerabilities. Furthermore, developers and site reliability engineers are now being asked to secure the services they own despite having little prior experience or training in security techniques.
“As cloud infrastructure continues to become more dynamic and scales to meet demand, tracking configuration for compliance will become more challenging,” said Renaud Boutet, VP of Product at Datadog. “Datadog Compliance Monitoring provides full end-to-end visibility into cloud environments, allowing for continuous tracking of security configuration rules in a single, unified platform. When Datadog detects a compliance violation, DevSecOps teams will receive an alert that diagnoses the failure, lists the exposed assets and provides instructions on how to remediate it, quickly.”
Compliance Monitoring tracks the state of all cloud-native resources, such as security groups, storage buckets, load balancers, and Kubernetes. Key features include:
- Wide spectrum security observability: Compliance Monitoring rapidly discovers all assets and their configurations, and combines this asset information with the full telemetry of the Datadog platform. Observing misconfigurations in the context of other threats and application performance allows developers and security engineers to go from identifying a poorly configured service to diagnosing an attack in seconds.
- Continuous compliance posture: Datadog uses two methods to continuously assess the configuration of an environment. First, Datadog crawls cloud health services configuration, ingesting this data and analyzing it. Second, the Datadog agent collects local configuration information from servers and containers.
- Compliance Status Snapshot: Expert-built dashboards offer comprehensive snapshots of the adherence to common compliance frameworks and standards such as PCI DSS and CIS Benchmarks.
- Production-ready file integrity monitoring (FIM): Datadog’s single universal agent collects data from containers, Kubernetes clusters, and hosts so organizations can monitor runtime security as they move their workloads to the cloud.
- Easy custom governance policies: Datadog provides a simple WYSIWYG interface for users to build their own custom security and governance policies and reporting dashboards.
Datadog Compliance Monitoring is now available in beta within the Datadog platform.
The Latest
Over the last 20 years Digital Employee Experience has become a necessity for companies committed to digital transformation and improving IT experiences. In fact, by 2025, more than 50% of IT organizations will use digital employee experience to prioritize and measure digital initiative success ...
While most companies are now deploying cloud-based technologies, the 2024 Secure Cloud Networking Field Report from Aviatrix found that there is a silent struggle to maximize value from those investments. Many of the challenges organizations have faced over the past several years have evolved, but continue today ...
In our latest research, Cisco's The App Attention Index 2023: Beware the Application Generation, 62% of consumers report their expectations for digital experiences are far higher than they were two years ago, and 64% state they are less forgiving of poor digital services than they were just 12 months ago ...
In MEAN TIME TO INSIGHT Episode 5, Shamus McGillicuddy, VP of Research, Network Infrastructure and Operations, at EMA discusses the network source of truth ...
A vast majority (89%) of organizations have rapidly expanded their technology in the past few years and three quarters (76%) say it's brought with it increased "chaos" that they have to manage, according to Situation Report 2024: Managing Technology Chaos from Software AG ...
In 2024 the number one challenge facing IT teams is a lack of skilled workers, and many are turning to automation as an answer, according to IT Trends: 2024 Industry Report ...
Organizations are continuing to embrace multicloud environments and cloud-native architectures to enable rapid transformation and deliver secure innovation. However, despite the speed, scale, and agility enabled by these modern cloud ecosystems, organizations are struggling to manage the explosion of data they create, according to The state of observability 2024: Overcoming complexity through AI-driven analytics and automation strategies, a report from Dynatrace ...
Organizations recognize the value of observability, but only 10% of them are actually practicing full observability of their applications and infrastructure. This is among the key findings from the recently completed Logz.io 2024 Observability Pulse Survey and Report ...
Businesses must adopt a comprehensive Internet Performance Monitoring (IPM) strategy, says Enterprise Management Associates (EMA), a leading IT analyst research firm. This strategy is crucial to bridge the significant observability gap within today's complex IT infrastructures. The recommendation is particularly timely, given that 99% of enterprises are expanding their use of the Internet as a primary connectivity conduit while facing challenges due to the inefficiency of multiple, disjointed monitoring tools, according to Modern Enterprises Must Boost Observability with Internet Performance Monitoring, a new report from EMA and Catchpoint ...
Choosing the right approach is critical with cloud monitoring in hybrid environments. Otherwise, you may drive up costs with features you don’t need and risk diminishing the visibility of your on-premises IT ...
