{"id":46578,"date":"2022-05-10T00:00:00","date_gmt":"2022-05-10T00:00:00","guid":{"rendered":"urn:uuid:ff5e7b80-0f96-f127-0a55-35d69e49ed6b"},"modified":"2022-05-10T00:00:00","modified_gmt":"2022-05-10T00:00:00","slug":"security-above-and-beyond-cnapps","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/security-above-and-beyond-cnapps\/","title":{"rendered":"Security Above and Beyond CNAPPs"},"content":{"rendered":"

<\/p>\n

<\/div>\n

The cloud is driving transformative benefits for global organizations. But in rushing their applications and infrastructure into new computing environments, they\u2019re also exposing business-critical data to new risks. There are now more ways for the bad guys to steal data, deploy malware, hijack resources, and hold them to ransom. The complexity of hybrid and multi-cloud environments and the need to coordinate across multiple stakeholder groups further compound these challenges.<\/p>\n

The answer is a simple, flexible, unified security platform. But as industry analysts are already suggesting, organizations need to go beyond the confines of traditional Cloud-Native App Protection Platforms (CNAPPs) to include extended threat detection and response (XDR). This is where Trend Micro One is way ahead of the curve.<\/p>\n

Why Cloud-Native Apps (CNAPP)?<\/span><\/p>\n

No two organizations are the same. But one thing the cloud has done most is increase the complexity of their IT environments. Some 92% of enterprises have a multi-cloud strategy<\/a>, while 80% are invested in hybrid cloud. That means most are running a blend of on-premises and cloud and multiple cloud providers. All of which need managing and securing in different ways. To add to this complexity, various groups\u2014from cloud operations and cloud architects to DevOps and traditional security teams\u2014all have their own competing objectives and requirements.<\/p>\n

This is part of the reason why CNAPP is gaining traction\u2014consolidating many of the most important features from siloed point products into one streamlined offering. The main capabilities are usually listed as<\/a> artifact scanning, runtime protection, and cloud configuration. By delivering automated, powerful protection like this, organizations can overcome developers\u2019 security knowledge gaps, accelerate time-to-value, reduce the security gaps that point products create, and drive a true DevSecOps culture.<\/p>\n

Something for SecOps<\/span><\/p>\n

This is what Trend Micro Cloud One<\/a> was built for. It combines comprehensive protection of workloads, containers, serverless architectures, cloud storage, applications, open-source, and networks with cloud security posture management. And it delivers all of this from a single platform with a focus on API-powered flexibility and automation, designed to drive operational efficiencies and accelerated, streamlined compliance.<\/p>\n

But crucially, Trend Micro Cloud One also offers security operations (SecOps) teams critical capabilities thanks to integration with our XDR and MDR product Vision One<\/a>. This kind of detection and response feature is increasingly important to cloud builders, as no organization is 100% breach-proof today, even with all the advantages of CNAPP at their disposal.<\/p>\n

It\u2019s a fact recognized by Gartner, which predicted in a recent report<\/a> that:<\/p>\n