Check Point CloudGuard Dome9
Cloud Security and Compliance Posture Management

Features:

Security, Governance and Compliance Automation

CloudGuard allows organizations to easily manage the security and compliance of their public cloud environments at scale across Amazon Web Services (AWS), Microsoft Azure and Google Cloud Platform (GCP).

High Fidelity Cloud Security Posture Management

Visualize and assess security posture, detect misconfigurations, model and actively enforce gold standard policies, protect against attacks and insider threats, cloud security intelligence for cloud intrusion detection, and comply with regulatory requirements and best practices all from one unified platform. With CloudGuard, organizations have faster and more effective cloud security operations, pain-free compliance and governance, and automated DevSecOps best practices.

Agentless, Cloud-Native Architecture for Today's Cloud

The CloudGuard Dome9 service uses the native security controls provided by public clouds to protect all cloud resources, including built-in services such as AWS RDS, GCP compute engine instances, and Azure LBs, meeting the needs of today’s public clouds that agent-based solutions cannot address. CloudGuard Dome9 allows you to protect multiple cloud environments by combining cloudagnostic policy automation with cloud-native security capabilities. You can specify policies once across multiple clouds, and the system uses underlying cloud controls to implement the policy on each cloud.

High Fidelity Posture Management

CloudGuard Dome9 provides enriched vulnerability management findings to better identify, prioritize, and auto-remediate events based on public exposure-minimizing risk. Prevent critical cloud security misconfigurations and keep up with evolving posture management security and compliance best practices, including auto-remediation. Comply with regulatory and industry standards, such as HIPAA, CIS BENCHMARKS, NIST CSF/800-53, PCI-DSS, with the most contextual cloud security across, 70+ native cloud services.

Faster Time-to-Value

With no software to install and no agents to manage, you can secure your environment with CloudGuard Dome9 in under five minutes. You never have to worry about software updates and scaling problems. CloudGuard Dome9 integrates with your AWS accounts leveraging innovative cross-account trust policy to gather security information, rather than sharing keys and credentials.

Remediate in Place - Find it , Fix it

Based on learned function context, CloudGuard provides dynamic protection along with automatic protection from the time of invocation. CloudGuard’s Function Self Protection (FSP) detects, alerts, and stops application layer attacks such as the Serverless OWASP Top 10 and anomalous activity independent of the attack trigger.

Platform Integrations for Alerting & Forensics

CloudGuard Dome9 is not just a monitoring solution. In addition to powerful visualization capabilities that allow you to review security posture in real-time to discover any vulnerabilities, compromised workloads, open ports or misconfigurations, CloudGuard Dome9 also allows administrators to take the necessary actions to rapidly mitigate risk through remediation from a single platform. No more patchwork of tools needed for monitoring, remediation, or enforcement, thus bringing agility to the security and compliance lifecycle.

Use Cases:

Cloud Security Operations

Visualize assets, assess security posture, fix misconfigurations and threats, manage the cloud firewall, and enforce security from a single source of network authority.

Privileged Identity Protection

Protect against compromised credentials and identity theft using a cloud’s native IAM capabilities to safeguard access to actions that can have a big impact.

Compliance and Governance

Manage the compliance lifecycle for standards such as PCI DSS, from automated data aggregation and assessment to remediation and reporting.

Cloud Security Intelligence

CloudGuard Log.ic is a cloudnative security intelligence technology that delivers cloud intrusion detection, network traffic visualization and user activity analytics.

Workload Protection

Seamlessly integrate protections and controls into your CI/CD tools, like CloudFormation and Terraform, and evaluate security posture pre-deployment-scaling across hundreds of thousands of cloud assets.

Documentation:

Download the Check Point CloudGuard Dome9 Datasheet (PDF).