Cloud Advisor IT Security and Resiliency Platform

Main article: IT Service Management (ITSM)

2023: Ability to search for vulnerabilities for Yandex.cloud and Cloud users

Cloud Advisor has added to its product the ability to identify and prioritize vulnerabilities in operating systems, packages and libraries on virtual machines operating in the public clouds Yandex.Cloud and Cloud. This became known on March 30, 2023.

Cloud Advisor releases a CSPM (Cloud Security Posture Management) product that provides security, compliance, cost savings, and inventory in the public cloud.

With the addition of a vulnerability scanning module, Cloud Advisor becomes a comprehensive platform for protecting cloud infrastructure at all levels - from cloud configuration to software running on virtual machines.

Vulnerability detection is carried out using agentless scanning of block storage. This approach ensures product deployment in minutes, 100% coverage of the entire infrastructure, lower total cost of ownership, and no impact on virtual machine performance.

All vulnerabilities found are prioritized depending on the network connectivity and rights of the object on which they are found, taking into account information about the configuration of the cloud infrastructure. Additionally, Vulristics tool algorithms are used for prioritization, which take into account various factors: the presence of public exploits, the type of vulnerability, CVSS assessment, etc. This allows you to focus on fixing those vulnerabilities that have a real risk to the infrastructure^[1].

Notes