CIO Bulletin

Ermetic – An identity-first security platform providing holistic, multi-cloud protection in an easy-to-deploy SaaS solution

Identity management is undoubtedly the new leadership model for data protection and business growth. And an identity-first security mechanism is swiftly becoming the need of the hour. Identity-first security is revolutionizing the way businesses protect themselves. It's a new approach to protecting data and devices that increases productivity, preserves trust, drives compliance, and helps your business grow. And identity management is undoubtedly the new leadership model for data protection and business growth. It helps businesses drive better security outcomes, ensuring business growth while improving customer experiences.

Ermetic is an identity-first cloud infrastructure security platform helping prevent breaches by continuously analyzing permissions, configurations and behavior across the full stack of identities, network, data and compute resources. Using advanced analytics to assess, prioritize and automatically remediate risks, Ermetic makes it possible to reduce your attack surface and enforce least privilege at scale even in the most complex cloud environments. The company is led by proven technology entrepreneurs whose previous companies have been acquired by Microsoft, Palo Alto Networks and others. Ermetic has received funding from Accel, Glilot Capital Partners, Norwest Venture Partners and Target Global.

Leveraging Best-in-Class Identity-First Services and Solutions

Cloud Infrastructure Entitlements Management (CIEM): CIEM is the essential next step in your cloud security strategy. CIEM solutions constantly monitor human and service identities, permissions, and activity. Applying analytics and machine learning, CIEM continuously analyzes risk and generates least privilege access policies. Cloud Infrastructure Entitlement Management (CIEM) – also called Cloud Identity Governance (CIG) – is a security segment that addresses the need to eliminate excessive entitlements and reduce access risk. CIEM solutions automate the detection, analysis and mitigation of cloud infrastructure access risk to help organizations meet evolving protection requirements for cloud-native applications across virtual machines, containers and serverless workloads.

Cloud Security Posture Management (CSPM): CSPM acquires configuration data from current cloud services and monitors the data continuously for risk, making it a priority for cloud security decision makers. Meanwhile, managing cloud infrastructure entitlements (CIEM) remains the most serious risk to address. So organizations need focused resources for managing both entitlements and cloud security posture to ensure iron-clad protection. Ermetic offers a unified and robust solution for both CSPM and CIEM. Cloud Security Posture Management (CSPM) helps organizations determine that their cloud applications and services are securely configured. It offers a broad view of network, data storage and API settings. CSPM acquires configuration data from the cloud services in use and monitors the data continuously for risk. It can also analyze against compliance benchmarks to detect vulnerabilities, threats, and account hygiene violations.

Cloud-Native Application Protection Platform (CNAPP): CNAPP is a new cloud security approach defined by Gartner that emphasizes the need for unified lifecycle security as opposed to patchwork solutions. CNAPP encompasses a wide set of overlapping tools spanning development and production, including but not limited to: Infrastructure as Code (IaC) scanning, cloud infrastructure entitlement management (CIEM) and cloud security posture management (CSPM). CNAPP simplifies cloud security by combining the capabilities of tools such as: Cloud Security Posture Management (CSPM), Cloud Workload Protection Platforms (CWPP), and Cloud Infrastructure Entitlement Management (CIEM) in one platform. The Ermetic platform provides a strong entry point to CNAPP by delivering cloud native, context-aware security for AWS, Azure and GCP – achieved via a unique combination of cloud infrastructure entitlement management (CIEM) and cloud security posture management (CSPM). Ermetic provides deep visibility and actionable risk intelligence, automated remediation, real-time anomaly detection and compliance across your multi-cloud environment.

Public Cloud Security: Moving to the cloud is all about agility and flexibility, but comes at a cost with regard to security. With thousands of new identities, compute, data and network resources, come intricate interdependencies. It can be difficult to spot the toxic misconfigurations that pose a huge risk to your cloud. Ermetic discovers all resources, human and service identities, permissions and configurations across AWS, Azure and GCP to provide a contextual asset inventory for managing your assets. By augmenting asset findings with log details and historical activities, security practitioners can spot toxic combinations that directly impact their cloud attack surface and the damage that could follow a breach. Every cloud resource that is exposed to the public internet represents a potential entry point for malicious actors. Ermetic determines the exposure of your cloud resources by continuously assessing and prioritizing risk across the environment.

Shai Morag | Co-founder & CEO

Shai has over 20 years of product management, technology leadership and senior executive experience. Before Ermetic, Shai served as the co-founder and CEO of Secdo, a cybersecurity company, where he led the company from its inception to a successful acquisition by Palo Alto Networks (NSDQ:PANW) for $100M in only three years. Before Secdo, Mr. Morag served as the CEO of Integrity-Project, a company specialized in connectivity, networking and security solutions. He led them to significant growth and an acquisition by Mellanox (NSDQ:MLNX). He also served for 10 years as an officer in the IDF Intelligence Corps Unit 8200, where he held a variety of roles in management and product development, and won several national awards for excellence. Shai is a graduate of the Talpiot program and earned an MBA from Tel Aviv University.