{"id":379564,"date":"2020-11-12T08:03:40","date_gmt":"2020-11-12T13:03:40","guid":{"rendered":"http:\/\/www.marketnewsdesk.com\/?p=379564"},"modified":"2020-11-12T08:03:40","modified_gmt":"2020-11-12T13:03:40","slug":"sonatype-and-fugue-partner-to-shift-cloud-security-left-and-ensure-continuous-policy-compliance","status":"publish","type":"post","link":"https:\/\/www.marketnewsdesk.com\/index.php\/sonatype-and-fugue-partner-to-shift-cloud-security-left-and-ensure-continuous-policy-compliance\/","title":{"rendered":"Sonatype and Fugue Partner to Shift Cloud Security Left and Ensure Continuous Policy Compliance"},"content":{"rendered":"

\nInnovative solution empowers developers to deliver secure applications and automatically help them configure secure and policy compliant cloud infrastructure
\n<\/h2>\n
\n

Fulton, MD and Frederick, MD, Nov. 12, 2020 (GLOBE NEWSWIRE) — Sonatype<\/a>, the leading provider of innovation-friendly open source security tools, today announced a strategic partnership with Fugue<\/a>, the company putting engineers in command of cloud security, to deliver the first infrastructure-as-code (IaC) solution that shifts cloud security left into the developer workflow. The partnership further advances the missions of Sonatype and Fugue to empower software developers with best-in-class tools so they can accelerate innovation and simultaneously improve application security, cloud infrastructure security, and continuous compliance with defined policy.<\/p>\n

The combined capabilities of Sonatype and Fugue enable developers to find and fix security vulnerabilities when actively developing cloud applications, while at the same time preventing security vulnerabilities and compliance issues from surfacing in production due to misconfigured cloud infrastructure. The joint solution includes out-of-the-box guidance to assist developers when configuring IaC and automatically foster compliance with privacy and security standards, including CIS Foundations Benchmarks, GDPR, HIPAA, ISO 27001, NIST 800-53, PCI, SOC 2, and custom rules.\u00a0 \u00a0<\/p>\n

\u201cSonatype has a long and successful history of providing front-line software developers with friendly feedback pertaining to the health of open source libraries, making it easy for them to identify and remediate security risk, without slowing down innovation,\u201d said Wayne Jackson, CEO of Sonatype. \u201cIn today\u2019s cloud-native world, developers are not just responsible for building secure applications, they\u2019re also responsible for configuring and provisioning secure cloud infrastructure using tools like Terraform. By working with Fugue, we\u2019re equipping developers with the right information at the right time so they can always make healthy decisions when configuring IaC.\u201d<\/p>\n

In Q1 2021, Sonatype will offer new Nexus IaC capabilities as an add-on to its Nexus Lifecycle<\/a> product that incorporates Fugue’s cloud infrastructure security and compliance technology. This will make it possible for developers using Nexus Lifecycle to find and easily fix misconfigurations in Terraform plans before being applied to production infrastructure, and use those same policies with Fugue to ensure continuous compliance in production.\u00a0\u00a0<\/p>\n

For initial details, and to sign up to learn more about Sonatype\u2019s Nexus Lifecycle IaC capabilities, go here<\/a>. Additionally, Sonatype and Fugue will collaborate to bring the Fugue runtime SaaS continuous compliance solution to Sonatype customers, who can learn more here<\/a>.<\/p>\n

\u201cSonatype and Fugue have a strong history of leadership in empowering developers to securely build and operate in order to keep their data safe. We\u2019re proud to partner with them to deliver a single solution to address the full breadth of cloud security and compliance challenges,\u201d said Phillip Merrick, CEO of Fugue. \u201cThe mutable nature of cloud APIs brings serious risk of post-deployment misconfiguration, and Sonatype and Fugue are making it possible for the first time to address all relevant cloud vulnerability surfaces \u2014 from initial development to runtime production environments \u2014 with a single solution using the same policies.\u201d\u00a0\u00a0<\/p>\n

\n Full Breadth Cloud Security and Compliance<\/strong>\n <\/p>\n

Sonatype and Fugue are delivering a unified cloud security and compliance solution that empowers software developers to address the entire cloud threat landscape with:<\/p>\n