Data security authorization provider Veza has announced a new solution for access security and governance across all SaaS applications, including Salesforce, GitHub and Slack. Veza for SaaS applications enables customers to automate access reviews, find and remediate privilege access violations, trim privilege escalation, and prevent SaaS misconfigurations by securing the attack surface associated with usage widespread of SaaS applications and enabling compliance with frameworks such as ISO 27001 and GDPR, according to the firm.
According to Gartner, organizations maintain an average of 125 different SaaS applications, but typically only know about a third due to decentralized ownership and provisioning. As SaaS applications grow in popularity, security teams face significant challenges in managing and protecting the spread of the data they use, and security and governance typically fail to keep pace with the increase in use of SaaS applications. Securing access is complicated by the application-specific role-based access controls that many SaaS applications use. Meanwhile, SaaS applications are vulnerable to privilege escalation and risky misconfigurations if security teams don’t have visibility into them.
Veza for SaaS applications includes privileged access alerts, access control configuration error detection
Veza for SaaS Applications enables customers to protect sensitive data in SaaS applications against breaches, ransomware and insider threats, Veza said in a press release. It integrates with 15 popular SaaS applications, including Salesforce, JIRA, Confluence, Coupa, Netsuite, GitHub, Gitlab, Slack and Bitbucket using an out-of-band approach designed to increase flexibility, the company added.
Veza’s capabilities for SaaS applications include:
- Privileged access monitoring alerts security teams of new privileged access grants and privilege drift in SaaS applications, including new local administrators in Salesforce. According to Veza, the solution monitors both human and machine identities, such as service accounts and third-party integrations.
- User access reviews and entitlement certifications automate the identity governance and administration process of periodic access reviews. The solution uses workflow rules to direct certification requests and provides decision makers with an authorization context to choose the least permissive role, the company said.
- SaaS Application Monitoring analyzes administrative misconfigurations and policy violations with over 100 pre-built queries to monitor and detect common misconfigurations in permissions and access controls. As an example, the solution will alert the security team when users have access to sensitive data but do not have multi-factor authentication (MFA) enabled.
The growth of SaaS introduces changes in cybersecurity for organizations
Last October, the Cloud Security Alliance published SaaS Governance Best Practices for Cloud Customers, a white paper that outlines a core set of fundamental security and governance practices for SaaS environments. It stated that organizations should develop SaaS-specific security strategies and architectures that guide the deployment and maintenance of SaaS applications, based on the evaluation, adoption, use, and termination of SaaS services.
Organizations should also ensure that they consider SaaS providers as part of their third-party risk management programs and that business continuity and incident response plans and processes are updated accordingly, the guidance adds . “The SaaS environment ultimately presents a change in the way organizations manage cybersecurity that introduces a shared responsibility between producers and consumers. Failure to adjust accordingly can have devastating consequences, such as the disclosure of sensitive data, the loss of revenue, customer confidence and regulatory consequences,” the document says.
Copyright © 2023 IDG Communications, Inc.
Source link
Ikaroa is proud to announce the release of Veza- its game-changing access security, governance solution for SaaS applications. Created after extensive research and development, this solution serves as an answer to the ever-growing demand for secure access and governance policies to protect SaaS applications.
Veza’s secure access governance solutions ensures that all SaaS applications, whether they be public, private or hybrid applications, are accessible in a safe and secure environment, while being blocked in the event of any suspicious activities. This solution also helps to enforce governance and keep teams compliant with the latest regulations by notifying administrators when any non-compliant activities are detected.
The intuitive Veza dashboard provides users with a comprehensive view of their SaaS access privileges and provides administrators with powerful insights into which applications are being used so that changes can be made in an efficient, cost-effective manner.
The solution is powered by Ikaroa’s experienced team of security experts and engineers and leverages the latest in secure granting, authentication and authorization technologies.
We are very excited to offer this simple, lightweight cloud security application to help organizations increase the security of their SaaS applications while taking advantage of the cost savings and flexibility they bring.
We see this solution being much needed in the current online world where our online data is becoming ever more precious, and vulnerable to malicious attacks. With Vezas secure access policy, organizations can be confident about their data security and compliance.
At Ikaroa, we are proud to bring leading-edge solutions that protect businesses, their customers, and the data they trust us to safeguard. With Veza, we are confident you’ll enjoy a secure and safe experience every time you use your SaaS applications.
