{"id":340451,"date":"2017-05-09T19:30:23","date_gmt":"2017-05-09T11:30:23","guid":{"rendered":"http:\/\/techcrunch.com\/?p=1486753"},"modified":"2017-05-09T19:30:23","modified_gmt":"2017-05-09T11:30:23","slug":"redlock-emerges-from-stealth-to-protect-customers-from-faulty-cloud-configurations","status":"publish","type":"post","link":"https:\/\/people.utm.my\/asmawisham\/redlock-emerges-from-stealth-to-protect-customers-from-faulty-cloud-configurations\/","title":{"rendered":"RedLock emerges from stealth to protect customers from faulty cloud configurations"},"content":{"rendered":"

<\/p>\n

The major\u00a0cloud infrastructure vendors know a thing or two about securing their platforms, but they still can\u2019t protect their customers against user configuration error. That\u2019s where RedLock<\/a>, a startup emerging from stealth today comes in. It can warn you or fix a user error that could expose your data.<\/p>\n

Clearly, the cloud vendor has primary responsibility to ensure that the underlying infrastructure is secure, but it\u2019s up to customers to secure their\u00a0own data, based at least partly on how they configure each cloud instance. When you consider that a company could\u00a0launch hundreds or even thousands of cloud instances per day across a range of vendors, launched by\u00a0a variety of developers and operations employees, the problem only multiplies. RedLock is a cloud service designed to save your company from configuration\u00a0mistakes that could leave your data vulnerable.<\/p>\n

Say, for example, that one of your developers starts an EC2 instance with a MongoDB database, populates it with customer PII and accidentally leaves it open to the internet. RedLock would save you from this potential disaster, says Varun Badhwar, company founder and CEO, by issuing a warning that the data in this database is exposed to the internet and asking if you really want to do this.<\/p>\n

\u201cI think for years Amazon has been talking about the shared responsibility model. They have diagrams where they have responsibility to secure physical infrastructure, but ultimately it\u2019s the customer\u2019s responsibility to secure the content, applications and firewall settings,\u201d Badhwar explained.<\/p>\n

Badhwar has been around the cloud security space since 2005 when he helped build the security for force.com, Salesforce\u2019s platform as a service. Later he helped launch\u00a0CipherCloud<\/a>.<\/p>\n

His latest company offers a range of cloud security services including a high-level view of your cloud activity across supported vendors, policy monitoring, where you can set a policy and have RedLock enforce it automatically or run it by you first, anomaly detection and risk measurement. It also will allow you to do forensics on an incident after the fact.<\/p>\n

The RedLock service integrates with your infrastructure service at the API level. There is no agent or proxy required, according to Badhwar. For now it supports AWS and Google Cloud, but later this year, it will also add support for Azure, giving the company support for the big three cloud infrastructure vendors.<\/p>\n

\"\"<\/p>\n

Photo: CloudLock<\/p>\n<\/div>\n

Surely, the cloud vendors could each provide a service like this for its customers, but as Badhwar points out, such a solution would very likely only work for the individual vendor\u2019s cloud, and RedLock provides a security picture\u00a0across multiple clouds.<\/p>\n

The company also announced that it has raised $8.5 million in Series A, which brings the total raised to $12 million including an earlier $3.5 million seed round. Investors across both rounds include Sierra Ventures, Storm Ventures, Dell Technologies Capital, which came out of stealth yesterday<\/a>, and other unnamed parties.<\/p>\n

RedLock is available widely today. Pricing is subscription-based, based on the number of workloads the system is monitoring.<\/p>\n

Featured Image: istock photo\/Getty Images\/Getty Images<\/small><\/p>\n","protected":false},"excerpt":{"rendered":"

\"Cloud The major\u00a0cloud infrastructure vendors know a thing or two about securing their platforms, but they still can’t protect their customers against user configuration error. That’s where RedLock, a startup emerging from stealth today comes in. It can warn you or fix a user error that could expose your data. Clearly, the cloud vendor has primary responsibility to ensure that the… Read More<\/a><\/p>\n

\n<\/img><\/a> <\/img><\/a> <\/img><\/a> <\/img><\/a> <\/img><\/a> <\/img><\/a>\n<\/div>\n

\"\"\/ <\/p>\n","protected":false},"author":5817,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[25],"tags":[59,66,26],"class_list":["post-340451","post","type-post","status-publish","format-standard","hentry","category-technology","tag-media","tag-techcrunch","tag-technology"],"_links":{"self":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/340451","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/users\/5817"}],"replies":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/comments?post=340451"}],"version-history":[{"count":0,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/340451\/revisions"}],"wp:attachment":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/media?parent=340451"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/categories?post=340451"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/tags?post=340451"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}