Home > News > featured news > Bridgecrew Drops New Developer-first Platform, Streamlines Infrastructure Security from Code to Cloud

Bridgecrew Drops New Developer-first Platform, Streamlines Infrastructure Security from Code to Cloud

Bridgecrew | June 09, 2020

Bridgecrew transforms how teams secure their public cloud by embedding infrastructure security earlier in development lifecycles.
With new run-time and build-time integrations, Bridgecrew equips developers with automated fixes for cloud security issues—and delivers them as code.
Infrastructure-as-code allows teams to provision cloud workloads at scale, presenting both a challenge and opportunity when it comes to security.

Bridgecrew transforms how teams secure their public cloud by embedding infrastructure security earlier in development lifecycles. With new run-time and build-time integrations, Bridgecrew equips developers with automated fixes for cloud security issues—and delivers them as code. Public cloud security posture in run-time Bridgecrew connects seamlessly to cloud environments with run-time scanning for AWS, Azure, and Google Cloud. As teams expand their cloud footprints, Bridgecrew automatically identifies run-time issues that expose them to risk.

But unlike compliance and reporting tools, Bridgecrew comes fully equipped with automated playbooks to correct misconfigured resources. Infrastructure-as-code and workload protection in build-time. Infrastructure-as-code allows teams to provision cloud workloads at scale, presenting both a challenge and opportunity when it comes to security. Bridgecrew helps teams keep infrastructure-as-code secure by scanning for issues in Kubernetes, Terraform, and AWS CloudFormation. Bridgecrew also provides fixes at the infrastructure-as-code level—developers can open pull requests through version control system integrations with GitHub and Bitbucket or run code in their local environments.

Infrastructure-as-code allows teams to provision cloud workloads at scale, presenting both a challenge and opportunity when it comes to security, Bridgecrew helps teams keep infrastructure-as-code secure by scanning for issues in Kubernetes, Terraform, and AWS CloudFormation.

~ AWS CloudFormation

Developer ecosystem integrations. In addition to providing cloud security posture visibility and automated remediations, Bridgecrew prevents cloud misconfigurations through CI/CD pipeline integrations with GitHub Actions, CircleCI, and Jenkins. Teams get cloud security monitoring as part of every build, ensuring that misconfigurations aren't unknowingly deployed. Ecosystem integrations with Jira, Splunk, and Slack provide real-time alerts where developers need them. Open-source software is key to Bridgecrew's platform and its mission to advance the codified cloud security movement.

Their engineering team supports community-led projects and develop their own tools: Checkov, a static analysis tool for infrastructure-as-code. AirIAM, a least-privilege automation framework for AWS IAM. TerraGoat, a "vulnerable-by-design" Terraform security training tool To empower developers to take a hands-on role in securing their public cloud infrastructure, Bridgecrew's free Community plan now includes both scanning and remediations.

Bridgecrew also provides fixes at the infrastructure-as-code level—developers can open pull requests through version control system integrations with GitHub and Bitbucket or run code in their local environments.

Bridgecrew is the codified cloud security platform trusted by teams from Brex, DataBricks, OneMain Financial, and more. Founded in 2019 by industry leaders Idan Tendler, Barak Schoster Goihman, and Guy Eisenkot, Bridgecrew is based in San Francisco and is backed by top-tier VCs, including Battery Ventures, NFX, and Sorensen Ventures. and is backed by top-tier VCs, including Battery Ventures, NFX, and Sorensen Ventures. Bridgecrew’s developer-first solution allows DevOps and engineering teams to save critical time and money as they address these ongoing security tasks with just the click of a button.

Traditional cloud security tools merely detect gaps in infrastructure security, pushing open issues and violations to DevOps and engineering teams to resolve. This requirement of manual remediation means issues take days or weeks to resolve, leaving a company’s infrastructure vulnerable. It’s also become the main deterrent for companies implementing cloud security and migrating to the cloud. The automated technology is also well-suited for the age of COVID-19 and today’s volatile market environment in which many organizations are trying to automate security and DevOps processes to cut costs and become significantly more efficient.

Spotlight

DocuSign vs Dropbox Sign: What's the difference?

Making the decision to use an electronic signature tool is a big step on the way to building an efficient agreement system. But not all e-signature providers are the same. Before you make that step, you want to make sure that you’re lined up in the right direction. Agreements don’t start or end when someone signs on the dotted d

More featured news

Spotlight

DocuSign vs Dropbox Sign: What's the difference?

Related News

Application Infrastructure, Windows Systems and Network

Tachyum Unveils Path to Sustainable Green Datacenters

businesswire | July 27, 2023

Tachyum™ announced today the release of the white paper, “Tachyum Prodigy – Solution for Data Centers that are Hungry for Energy,” explaining how Prodigy®, the world’s first Universal Processor, is ideally suited to help overcome increasingly excessive energy use in data centers. Data centers are among the most energy-demanding facilities in the world. A report by the International Energy Agency (IEA) indicates that 3% of global electricity use comes from data centers and data transmission networks. Data centers are expected to consume 20% of the world's energy supply by 2025 as the demand for digital services continues to grow. Tachyum’s white paper details how Prodigy delivers disruptive innovation for data centers with unprecedented power efficiency by unifying the CPU, GPGPU and TPU into a single processor die, enabling groundbreaking performance while removing the need for power-hunger, costly accelerators. The white paper further shows how this compares to other data center solutions with higher performance/watt than both CPUs and GPUs; up to 4.4x higher performance/W than Intel 8490-H for cloud computing; and up to 13.4x higher performance/W than Nvidia H100 for generative AI. “Keeping pace with the energy demands of today’s hyperscale data centers is simply not attainable,” said Dr. Radoslav Danilak, founder and CEO of Tachyum. “Additionally, massive growth from the rapid adoption of AI can only be accomplished by enabling a single hardware platform, like Prodigy, that can handle multiple workloads and avoids the time and energy from separate, custom-built solutions. Those reading the white paper will see that this approach makes the most sense and will become more evident as power demand increases.” Prodigy provides both the high performance required for cloud and HPC/AI workloads within a single architecture. As a Universal Processor offering utility for all workloads, Prodigy-powered data center servers can seamlessly and dynamically switch between computational domains. By eliminating the need for expensive dedicated AI hardware and dramatically increasing server utilization, Prodigy reduces CAPEX and OPEX significantly while delivering unprecedented data center performance, power, and economics. Prodigy integrates 128 high-performance custom-designed 64-bit compute cores, to deliver up to 4x the performance of the highest-performing x86 processors for cloud workloads, up to 3x that of the highest performing GPU for HPC, and 6x for AI applications. About Tachyum Tachyum is transforming the economics of AI, HPC, public and private cloud workloads with Prodigy, the world’s first Universal Processor. Prodigy unifies the functionality of a CPU, a GPGPU, and a TPU in a single processor that delivers industry-leading performance, cost, and power efficiency for both specialty and general-purpose computing. When hyperscale data centers are provisioned with Prodigy, all AI, HPC, and general-purpose applications can run on the same infrastructure, saving companies billions of dollars in hardware, footprint, and operational expenses. As global data center emissions contribute to a changing climate, and consume more than four percent of the world’s electricity—projected to be 10 percent by 2030—the ultra-low power Prodigy Universal Processor is a potential breakthrough for satisfying the world’s appetite for computing at a lower environmental cost. Prodigy, now in its final stages of testing and integration before volume manufacturing, is being adopted in prototype form by a rapidly growing customer base, and robust purchase orders signal a likely IPO in late 2024. Tachyum has offices in the United States and Slovakia.

Application Infrastructure, Data Storage

TNS and TRAFiX Launch Trading Infrastructure Partnership

businesswire | August 17, 2023

Transaction Network Services (TNS) today announced a partnership with next-generation trading and connectivity solutions provider TRAFiX to expand its order execution and routing management systems on TNS’ Dedicated Server across all major Canadian financial exchange markets. Based out of the Equinix TR2 Data Center in Toronto, TRAFiX will leverage the full-stack TNS Dedicated Server offering to optimize its custom hardware and trading connectivity requirements. TRAFiX will also use the recently launched TNS Cloud Server Management solution, which easily handles operating system installation, configuration and patching as well as monitoring, troubleshooting and access management. “The TNS bare-metal server inventory allows TRAFiX to efficiently scale and support our customers’ order management systems, execution management systems and Financial Information eXchange (FIX) routing capabilities in Canada and around the world,” said Greg Perry, TRAFiX COO. “Following our acquisition of ITS, this partnership with TNS furthers our commitment to the Canadian capital markets industry and sets the stage for building out TRAFiX’s broad solution portfolio.” “TRAFiX continues to execute our strategy to expand and serve our customers in regions around the world,” said Walter Fitzgerald, TRAFiX CEO. “This investment and installation of TNS Dedicated Server demonstrates our commitment to provide the best available technology infrastructure to support our customers today and into the future in Canada.” With the TNS Dedicated Server, TRAFiX has access to 9 standardized server options that have been optimized for front and middle office trading infrastructure to meet the specific computing needs of TRAFiX and its clients. TNS Dedicated Server is designed to deliver low latency performance of trading applications with multiple dedicated server options available. TNS’ server inventory and cloud managed data center services facilitate rapid installation and solve hardware supply chain and server management challenges for TRAFiX. “In response to our clients’ diminishing provider options in the market, we’ve significantly increased their return on outsourcing investment with full-stack server management,” said Rick Gilbody, TNS’ Head of North American Sales for its Financial Markets business. “By integrating infrastructure procurement, deployment, configuration and management, we can help our customers simplify operations, and rapidly increase their go-to-market opportunities.” Buy and sell-side institutions and their vendors can work with TNS as a single source for both managed hosting and managed infrastructure services. “The accelerated volume and low latency trading traffic that TNS can generate out of the TR2 data center will immediately allow us to gain more access and increase trading efficiencies for our mutual clients,” said Gilbody. “This strategic approach to colocation hosting is a significant milestone in expanding the ultra low latency trading footprint for Canadian financial markets, and connectivity to the greater global exchange community.” The agreement with TRAFiX represents the accelerating rollout of TNS’ bare metal colocation services and the company's new TNS Cloud platform. The complete suite of hosting solutions offers a wide range of dedicated and shared compute options to meet the needs of all trading operations and investment sectors. TNS brings together over 5,000 financial community endpoints, supported by a global, 125-strong point-of-presence footprint. Specifically designed and engineered to address the needs of financial market participants worldwide, TNS offers a range of connectivity, colocation, cloud, market data and VPN solutions within its Infrastructure-as-a-Service (IaaS) portfolio. Its solutions are monitored 24x7x365 by TNS’ Network Operations Centers in the US, UK, Australia and Malaysia. For further information visit tnsfinancial.com. About Transaction Network Services (TNS) Founded in 1990 and with headquarters across USA, Europe and Asia, TNS is a leading provider of mission-critical infrastructure, connectivity, market data and analytic services for the Financial Markets community. Delivered as a fully managed Infrastructure-as-a-Service offering, TNS provides an unrivalled, global, mission-critical footprint that significantly reduces the burdens, complexities and costs attributed to firms ‘going direct’. Through its ultra-low latency connectivity, its global market data offerings and its dedicated 24x7x365 local support, TNS remains the trusted solution provider to more than 750 counterparties globally.

Hyper-Converged Infrastructure, Windows Systems and Network

Midas Immersion Cooling to Supply 200 MW of Leading-Edge Immersion Cooling Equipment Solutions to Riot Platforms, Inc.

prnewswire | July 20, 2023

Midas Immersion Cooling, LLC ("Midas Immersion" or "Midas"), an industry leader in immersion cooling technology solutions for Bitcoin ("BTC") miners and Data Centers, with the largest deployed single-phase immersion cooling capacity of any manufacturer, announced today that it has entered into a long-term supply agreement (the "Agreement") with Riot Platforms, Inc. (NASDAQ: RIOT) ("Riot"), an industry leader in BTC mining and Data Center hosting. Under the Agreement, Midas has secured an initial order of 200 megawatts (MW) of its latest generation of immersion cooling systems, as well as associated equipment and adiabatic coolers for Riot's Corsicana, Texas, operations. Midas designed the ASICE 2.0 immersion cooling systems in Texas, for manufacture in North America. The Agreement provides delivery of the new immersion cooling systems by the end of 2023. Upon commissioning, the initial 200 MW of immersion cooling systems will bring the total deployed capacity of Midas immersion cooling systems to over 500 MW (0.5 GW). Under the Agreement, Midas has also granted Riot the option to purchase up to 400 MW of additional ASICE 2.0 immersion cooling systems and ancillary equipment from Midas, on the same terms as the initial order. Assuming full exercise of Riot's option, the total worldwide deployed capacity of Midas immersion cooling systems would be in excess of 900 MW, upon commissioning. Riot may exercise the option, in whole or in part, through December 31, 2024. "Midas is pleased to announce this landmark deal to continue as a trusted supplier to Riot," said Scott Sickmiller, CEO of Midas. "We remain committed to offering the best engineering, equipment performance, and customer support among immersion cooling providers." "Riot is pleased to partner with Midas Immersion for our Corsicana Facility," said Jason Les, CEO of Riot. "Partnering with Midas will enhance Riot's approach in diversifying our immersion capabilities to ensure efficiency across our mining infrastructure, prolonging the life of our miners, while also increasing our ability to maintain low cost of power by eliminating the need for costly forced-air cooling." About Midas Immersion Cooling Midas Immersion Cooling is a leader in engineering design and integration of single-phase immersion cooling equipment solutions for ASIC miners and data servers. Midas Immersion's patented cooling tanks increase miner and server density, decrease power consumption, and significantly reduce cooling and infrastructure costs compared to traditional air-cooled environments. About Riot Platforms, Inc. Riot's vision is to be the world's leading Bitcoin-driven infrastructure platform. Our mission is to positively impact the sectors, networks, and communities that we touch. We believe that the combination of an innovative spirit and strong community partnership allows the Company to achieve best-in-class execution and create successful outcomes. Riot is a Bitcoin mining and digital infrastructure company focused on a vertically integrated strategy. The Company has data center hosting operations in central Texas, Bitcoin mining operations in central Texas, and electrical switchgear engineering and fabrication operations in Denver, Colorado.