Yandex Security Deck

White Paper: DLP - Data Loss/Leak Prevention

2025: Addition of Kubernetes Security Posture Management Module

Yandex B2B Tech introduced updated security products for business on September 24, 2025. With their help, business will be able to close key risks - from hacking web applications and protecting against DDoS attacks to reducing threats of data breaches. The Security Deck comprehensive security management service has additional modules, including for protecting Kubernetes. The company also introduced ML WAF (Web Application Firewall) technology to block more complex web attacks. To test updated services, you need to submit an application on the site.

𝓲

Фото: Yandex B2B Tech

The Russian Kubernetes market is growing by 20-25% per year, ahead of global rates. However, container technologies were originally developed as a tool for developers, without taking into account security requirements and the ability to simultaneously work with information security teams. Due to the lack of built-in security, 67% of companies have delayed app releases over the past year, and 37% have suffered financial losses.

One of the modules - Kubernetes Security Posture Management (KSPM) in Security Deck provides a single space for developers and information security commands to control security without slowing down development processes. The module detects and protects Kubernetes clusters. Allows you to define a security policy when deploying applications, as well as protect applications during runtime.

With the development of technology, cloud infrastructures become more complex - our large customers often operate with thousands of resources that are constantly changing, and in such cases they cannot do without automating their protection. We are taking several important steps in this direction as well. We are developing the Security Deck CNAPP platform as a single login window that centralizes security management and allows you to quickly connect protection "by button," said Evgeny Sidorov, director of information security at Yandex Cloud.

In addition to the KSPM module, two more modules have appeared in the Security Deck platform: CSPM and Threat Detection. CSPM (Cloud Security Posture Management) automates the process of monitoring the security of configurations of the entire cloud infrastructure of the customer, and Threat Detection automatically monitors threats and displays warnings in the console after connecting Security Deck.

The updates also affected the DSPM module, a solution for detecting and controlling sensitive data in the cloud infrastructure. Now it is integrated with the Yandex 360 virtual office: information security specialists can scan data from the Disk and find personal, payment and other sensitive data. In the near future, a similar functionality will appear for the Mail.

Also, the ML WAF module has appeared as part of the Smart Web Security product. This is a machine learning-based protection technology that does not require configuration, works immediately when connected and allows you to instantly block web attacks that are not covered by signature rules. Now ML WAF covers a larger range of threats.

This technology was launched as part of a joint venture with SolidSoft. Previously, Yandex B2B Tech and SolidSoft organized a joint venture to create cybersecurity solutions - for example, tools that will allow businesses to protect their web applications from attacks and other modern threats.