Intezer4x

Upwind in Action: Intezer

Customer
intezer
Industry
Security Operations
Use Case
Contents
Customer
Industry
Security Operations
Use Case

Intezer Streamlines Cloud Compliance and Security with Upwind

Upwind truly acts as a single pane of glass for our security team

Roy Halevi
Roy HaleviCTO, Intezer

Challenges

  • Intezer needed a tool to streamline threat detection and vulnerability management for their cloud environment.
  • Intezer was previously using 3 tools to cover its multi-cloud infrastructure: CSPM, vulnerability scanning, and container scanning, and wanted a consolidated solution.
  • Intezer needed a way to contextualize and prioritize security vulnerabilities and their mitigation across all the layers of the cloud.

Solutions

  • Upwind shows risks across the cloud account, VMs, containers, and packages, allowing the consolidation of security solutions.
  • Upwind leverages runtime insights to provide Intezer with granular information to prioritize active and exploitable vulnerabilities.
  • Upwind helps Intezer reduce their average time to mitigate a security issue.

About Intezer

Intezer provides an Autonomous SOC platform: a fully automated Level 1 SOC powered by AI that triages alerts and investigates security incidents. Intezer leverages Upwind’s CNAPP for a number of use cases, including vulnerability management, CSPM, and real-time threat detection and response.

A surfboard leaning against a palm tree on a sunny beach. The ocean is calm, with gentle waves under a clear blue sky. The surfboard features a blue geometric design.

Cloud Protection and Security Through a Single Pane of Glass

Intezer previously required 3 tools to cover their multi-cloud infrastructure: CSPM, vulnerability scanning, and container scanning, which created a lot of noise and required their team to manage multiple dashboards on a daily basis. By using Upwind, they have been able to reduce spend on multiple tools and view all of their security metrics in one centralized location. 

This has saved their team time and allowed them to adopt a more centralized approach to cloud security, using Upwind as a single pane of glass for cloud infrastructure visibility and protection.

Upwind has given us an end-to-end view of our multi-cloud infrastructure in a single platform, which previously required us to use multiple tools. Upwind truly acts as a single pane of glass for our security team, helping us focus on what’s important.

Roy Halevi
Roy HaleviCTO, Intezer

Complete Visibility of Multi-Cloud Infrastructure

Upwind has not only helped Intezer to consolidate its tools and have a centralized view of its multi-cloud infrastructure, it also has helped their security team gain a better understanding of real-time network topology and have an end-to-end view of their cloud infrastructure. Upwind’s combination of CI/CD awareness and runtime insights gives Intezer needed context to see real-time resource communication and trace the root cause of threats and vulnerabilities.

Contextual Risk Analysis and Prioritization

Upwind helps Intezer understand risks and critical vulnerabilities across multiple layers and links those risks with runtime data to understand and prioritize risks effectively. By using runtime data and connecting it with build time intelligence, Upwind gives Intezer an end-to-end view of their cloud infrastructure and applications and helps them quickly identify critical risks and remediate them.

We use Upwind’s real-time insights to prioritize vulnerabilities effectively across various layers. This ensures our response is quick and well-informed, aligning with our operational priorities and threat landscape.

Roy Halevi
Roy HaleviCTO, Intezer

Compliance Monitoring and Reporting

Upwind helps Intezer continuously monitor their cloud environments to ensure they maintain compliance. By proactively monitoring for posture compliance, Upwind helps Intezer maintain security best practices and uphold top-tier security standards and posture requirements. The ability to view this data in the Upwind Platform has helped Intezer streamline their reporting progress and easily demonstrate robust security posture to auditors and stakeholders.

With Upwind, we are able to identify any vulnerabilities and can prioritize them for remediation — helping us operate more efficiently and securely.

Varun Brahmkshatriya
Cloud Engineer

Solutions

  • Upwind built support for gVisor, enabling Spacelift to gain process-level visibility into isolated containers from inside the platform, without an additional abstraction layer.
  • Upwind’s runtime-powered detection drastically reduced incident response times, allowing engineers to see exactly what happened inside containers and take quick action — whether that meant alerting the customer, killing a malicious process, or preventing future abuse.
  • Custom POC collaboration enabled rapid iteration, with Spacelift testing real-world attack patterns observed in wild malware samples, and Upwind delivering tailored features in record time.
  • Dynamic network graphs and runtime vulnerability prioritization allowed the team to track service communication patterns, identify drift, and focus on real exploitable risks — not just theoretical ones
Spacelift’s use of gVisor provided strong sandboxing and tenant isolation, but it came at the cost of visibility. The lack of runtime insight made it time-consuming to monitor network activity and understand events leading up to a security incident. Upwind’s gVisor feature solved this problem, providing Spacelift with full visibility into what was happening inside containers in real time. They could now trace every process, identify the actor behind it, and act decisively — all while preserving the container isolated gVisor was designed to enforce.

Visibility Inside Isolated Containers

Spacelift’s use of gVisor provided strong sandboxing and tenant isolation, but it came at the cost of visibility. The lack of runtime insight made it time-consuming to monitor network activity and understand events leading up to a security incident. Upwind’s gVisor feature solved this problem, providing Spacelift with full visibility into what was happening inside containers in real time. They could now trace every process, identify the actor behind it, and act decisively — all while preserving the container isolated gVisor was designed to enforce.

We tried reaching out to other vendors, but Upwind was the only one who moved fast, built what we needed, and treated us like a real partner. That’s rare — and it made all the difference.

Varun Brahmkshatriya
Cloud Engineer

Outcomes

  • Upwind built support for gVisor, enabling Spacelift to gain process-level visibility into isolated containers from inside the platform, without an additional abstraction layer.
  • Upwind’s runtime-powered detection drastically reduced incident response times, allowing engineers to see exactly what happened inside containers and take quick action — whether that meant alerting the customer, killing a malicious process, or preventing future abuse.
  • Custom POC collaboration enabled rapid iteration, with Spacelift testing real-world attack patterns observed in wild malware samples, and Upwind delivering tailored features in record time.
  • Dynamic network graphs and runtime vulnerability prioritization allowed the team to track service communication patterns, identify drift, and focus on real exploitable risks — not just theoretical ones
Upwind grants Petrofac the ability to instantly identify threats and eliminate malicious processes with the click of a button. It also creates prevention policies to block future malware from running in their environment.
Contents
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Link Copied
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS
Link Copied