Security News > 2020 > August > Terrascan open source software helps developers build secure cloud infrastructure
Accurics unveiled a major upgrade to Terrascan, the open source static code analyzer that enables developers to build secure infrastructure as code.
The new Terrascan architecture leverages the Open Policy Agent engine from CNCF, which dramatically simplifies policy definition for developers that want to create custom policies as well as provides over 500 out-of-the-box policies for the CIS Benchmark.
"This is vital in an environment where the scale and velocity of cloud breaches is constantly increasing, and organizations are required to implement policy guardrails to ensure that cloud native infrastructure is securely defined and managed."
Terrascan enhances the value of IaC used by organizations to define and manage cloud infrastructure.
Terrascan has already been downloaded by hundreds of developers to programmatically scan Terraform code during development in order to track policy violations.
News URL
http://feedproxy.google.com/~r/HelpNetSecurity/~3/boDROeiotD4/