Logos of three companies are displayed with a stylized beach backdrop. The beach has waves and golden sand under a bright blue sky.

How Petrofac Leverages Upwind for AKS Protection

November 07, 2024

How Petrofac Leverages Upwind for AKS Protection

In a multi-cloud and hybrid-cloud reality, Upwind provides comprehensive cloud security to accelerate productivity and empower their development, security and DevOps teams to innovate within a secure and efficient environment, including managed Kubernetes services like Microsoft’s AKS (Azure Kubernetes Service).

Upwind customer Petrofac leverages Upwind to protect their AKS resources across a number of areas:

  • Complete AKS visibility: Upwind allows Petrofac to view resource communication and identify all communication within clusters, within accounts, and to the internet.
  • Real-time AKS security: Petrofac can use Upwind’s threat detection and response to detect threats and stop them at the packet and process level.
  • Prioritized AKS risk analysis: Upwind has reduced 98% of Petrofac’s alerts, helping them focus on their most critical risks and proactively reduce their attack surface.
  • AKS identity awareness: Upwind gives Petrofac visibility into all of its running user identities, including viewing identity risk by resource, and identifying all users and their permissions that have access to AKS resources.

“Upwind was incredibly easy to get up and running, within the first few hours of connecting to the Platform, we already had an actionable list of recommendations to strengthen our AKS security, as well as real-time visibility into our containerized resource communication.”

Shahab Siddiqui |Global Head of Cyber Security, Petrofac

To read more about how Petrofac leverages Upwind to protect Azure resources, read the full case study.

Contents

Further Reading

behind-the-curtain-part-02

What’s Behind the Curtain? AWS Bedrock AgentCore Runtime Tear Down – Part II

Recap In Part I, we explored the AgentCore Runtime microVM from the inside and discovered we weren't alone - four platform binaries were running alongside our code, and one of them was quietly shipping logs to an AWS-internal S3 bucket. We left off with a question: what can we learn from these internal components, and…
behind-the-curtain-part-01

What’s Behind the Curtain? AWS Bedrock AgentCore Runtime Tear Down – Part I

Introduction When you deploy an AI agent to AWS Bedrock AgentCore Runtime, your code runs inside a Firecracker microVM - but it doesn't run alone. In this three-part series, we tear down the platform internals, document what we found, and assess how well the isolation holds up. Setting the Stage AWS Bedrock AgentCore Runtime is…
upwind-code

Upwind Code Expands Enterprise Coverage to Azure DevOps and Bitbucket Cloud

Modern development organizations rarely keep all their code in one place. Teams may use different version control platforms because of acquisitions, business-unit preferences, regional requirements, or existing development workflows. But when code is spread across multiple providers, application security coverage can become fragmented too. Today, Upwind Code adds support for Azure DevOps and Bitbucket Cloud.…
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS