Security News > 2021 > December > Open source cloud native security analyzer Terrascan embeds security into native DevOps tooling

Tenable enhanced Terrascan, an open source cloud native security analyzer that helps developers secure Infrastructure as Code.
"It's now more critical than ever for developers to have tools that can detect compliance and security violations across their entire cloud systems, including IaC," said Nico Popp, chief product officer, Tenable.
"Just as IaC opens the door to programmatically embed policy checks earlier in the development lifecycle, Terrascan detects compliance and security violations across IaC to mitigate risk before provisioning. We are committed to ensuring Terrascan remains open and available to all development teams and are excited to contribute to its growth."
New Terrascan features The ability to identify security risks in more IaC and container definition formats.
Terrascan delivers a scalable way to ensure that cloud infrastructure configuration adheres to evolving security best practices.
Terrascan fundamentally enhances the value of IaC used by organizations to define and manage cloud infrastructure, and improves security by enabling teams to eliminate risk before infrastructure is deployed.
News URL
https://www.helpnetsecurity.com/2021/12/02/terrascan-open-source-security-analyzer/
Related news
- Skyhawk Security brings preemptive cloud app defense to RSAC 2025 (source)
- Ransomware spike exposes cracks in cloud security (source)
- Closing security gaps in multi-cloud and SaaS environments (source)
- AI forces security leaders to rethink hybrid cloud strategies (source)
- LlamaFirewall: Open-source framework to detect and mitigate AI centric security risks (source)
- Vet: Open-source software supply chain security tool (source)
- Illicit crypto-miners pouncing on lazy DevOps configs that leave clouds vulnerable (source)
- The cloud security crisis no one’s talking about (source)