Product

This is part two of a two-part blog series on how Upwind helps DevOps teams. You can read part 1 here. The Upwind Cloud Security Platform helps organizations accelerate productivity and empower their Dev, Security, and DevOps teams to innovate within a secure and efficient environment. In our last article on how Upwind helps DevOps…

We are excited to announce a new capability to detect unusual DNS resolver activity. This detection notifies you of unusual behavior by a virtual machine or container in your cloud environment, which is communicating with a public DNS resolver that it hasn't communicated with recently. DNS Resolvers Trusting your DNS resolvers is a critical part…

We are excited to announce support for a new detection type - the identification of malicious port sweeps. Port sweeps can occur when compromised hosts or containers within your environment probe a port on a large number of publicly routable IP addresses or a large number of internal IP addresses. This type of activity is…

We are excited to announce a new detection type, identifying unusual DoT activity. This detection notifies you of unusual DNS over TLS (Transport Layer Security) communication, often referred to as DoT, which could indicate attempts to blend malicious communications with regular encrypted web traffic to evade detection. DNS over TLS (DoT)  DNS is a crucial…

This is part one of a two-part blog series on how Upwind helps DevOps teams. You can read part 2 here. Upwind’s Cloud Security Platform provides customers with end-to-end visibility into their environment – continually performing DevOps-grade deep assessments of your infrastructure & configuration, discovering everything you run and keeping this inventory up-to-date.  We systemically…

We are excited to announce support for a new detection type: identification of malicious port scans. Port scanners are applications that probe a host or server to find open ports or “weak points" in your network. These can be used by malicious actors to exploit vulnerabilities and identify network or security services running on a host.…

We are excited to announce a new threat detection, with the ability to identify an exposed Kubernetes Dashboard. This threat detection will inform you when the Kubernetes dashboard for your cluster is exposed to the internet by a Load Balancer.  Exposing your dashboard to the internet makes the management interface of your cluster vulnerable to…

In today's increasingly cloud-centric business landscape, securing your cloud environment is crucial. The growth and dynamic nature of attack surfaces often make it difficult for security teams to identify and address their most critical risks, resulting in a lack of clear prioritization and delaying remediation. Upwind’s Cloud Security Platform actively addresses this challenge by leveraging…

In the ever changing and complex cloud infrastructure landscape, organizations must not only protect their cloud infrastructure and applications from external threats, but also secure them from internal human and machine identities through the practice of Cloud Identity Entitlement Management (CIEM). Managing identities presents multiple challenges, ranging from the need for thorough auditing and generating compliance…

We are excited to announce the release of a new threat detection type - exec command in a kube-system namespace. This detection alerts you that kubectl exec has run a command in your environment in the kube-system namespace, which may indicate a suspicious activity.  What is Kubectl Exec? Kubectl is a command line tool used…

We are excited to announce the release of a new threat detection type - Spambot detection that targets suspicious activity on Port 25. A Spambot detection alerts you that a resource in your environment is abnormally communicating with a remote host most commonly via port 25. What is SMTP? Simple Mail Transfer Protocol (SMTP) is…

Upwind’s Cloud Security Platform harnesses the power of runtime data to comprehensively secure customers’ infrastructure and applications across multi-cloud and multi-architecture environments.  We are excited to announce that we are extending our infrastructure capabilities to support applications built using the Amazon Elastic Container Service (ECS).  Amazon ECS  is designed to simplify the deployment and management…