Ermetic Cloud Infrastructure Security Platform

Promote this Nomination

Additional Info

Company (that provides the nominated product / solution / service)Ermetic
Websitehttps://ermetic.com/
Company size (employees)100 to 499
Type of solutionCloud/SaaS

In 3 bullets, summarize why this product or service is different from the competition and deserves recognition:

Ermetic helps prevent breaches by reducing the attack surface of AWS infrastructures and enforcing least privilege at scale in the most complex environments. The Ermetic SaaS platform provides comprehensive cloud security for AWS that spans both cloud infrastructure entitlements management (CIEM) and cloud security posture management (CSPM). Ermetic is the only cloud infrastructure security platform that combines the following integrated capabilities:

Deep Multi-Cloud Asset Management
Manages all cloud identities and resources in one unified platform. Automates Investigation into permissions, configurations and relationships
Risk Assessment Across the Full Cloud Stack
Assesses and prioritizes risk holistically across human and service identities, network configuration, data and compute resources
Automatic Remediation Tailored for Your Needs
Mitigate risky privileges and faulty configurations through integration with ticketing, CI/CD pipelines, and IaC
Policy Enforcement and Shift Left
Defines and enforces automated guardrails for access permissions and resource configuration, from development to production
Threat Detection and Investigation
Detects suspicious behavior and configuration changes with continuous behavioral analysis and customizable alerts
Compliance and Identity Governance
Automates audit inventory and report on compliance with CIS, AWS Well Architected, GDPR, SOC2, NIST, PCI DSS, HIPAA, ISO and more

Ermetic has a rapidly growing global customer base that includes Tyler technologies, IronSource, airSlate, Symphony Talent, ,Beth Israel Lahey Health, , AppsFlyer, Sunday Sky, Latch, Riskified, Aidoc, IntelyCare, Wex Inc. (NYSE: WEX) and more. For more information on how Ermetic helps customers, visit https://ermetic.com/resources/case-studies/.

Brief Overview

Businesses using AWS typically underestimate the security risks associated with excessive permissions, privileges and misconfigurations that can expose cloud resources to external threats.

Ermetic has innovated a comprehensive cloud security platform for AWS that enables organizations to proactively reduce their attack surface, detect threats and reduce their blast radius in case of a breach. It provides everything from full-stack visibility and actionable risk intelligence, to automated remediation, real-time anomaly detection and compliance.

The number one question in cloud security is: “Who can access my data?” With Ermetic, you can reveal the toxic scenarios that put your data at risk, and implement zero trust and least privilege access across your multi-cloud infrastructure.

Cloud Security Posture Management (CSPM) is a top priority for cloud security decision makers. Meanwhile, managing cloud entitlements (Cloud Infrastructure Entitlements Management – CIEM) has emerged as the most serious cloud infrastructure risk to address. So organizations need to give serious attention to managing entitlements even as cloud security posture management remains a critical operation for them to address. Ermetic offers a unified and robust solution for both.

CSPM and CIEM tackle cloud security risk from different angles:
CSPM focuses on compliance and best practices, including configuration of workloads, infrastructure and management – a broad view
CIEM solves security risks associated with risky entitlements across the cloud stack — a deep view, focused on identities

Ermetic does both. It integrates CIEM and CSPM to address two key elements of AWS security: the detection and visualizing of attack vectors in cloud configuration and access permissions, and full stack visibility into identity entitlements and resource settings to understand and manage cloud risk.

Browse Award Nominations