CloudHealth Secure State

CloudHealth Secure State manages maintaining visibility and control over cloud security posture in multi-cloud environments. This platform integrates with AWS, Azure, and GCP, providing a unified view of cloud resources and their associated security risks.

Technically, CloudHealth Secure State employs a robust architecture that includes real-time monitoring based on CIS benchmark controls and custom security rules. It maintains a comprehensive inventory of cloud assets, including their settings, tags, and relationships, which is crucial for evaluating security rules and detecting misconfigurations. The platform's Explore feature, a real-time search and investigation engine, allows users to query and visualize cloud resources, understand relationships between assets, and identify potential security threats. For example, users can run queries to find specific resources, such as EC2 instances running a particular version of Docker, and visualize the connections between these resources and other cloud objects.

Operationally, CloudHealth Secure State streamlines the collaboration between security and DevOps teams by providing a unified view of security findings and their context. It includes features like role-based access controls, project-specific security views, and automated remediation jobs to fix common security violations. The platform also supports historical configuration change tracking, allowing teams to review the lifecycle of resources and identify potential security risks.

However, there are operational considerations to note. The platform's effectiveness relies on the accuracy and completeness of the cloud asset inventory, and managing this inventory can be complex in highly dynamic cloud environments. Additionally, the query performance and data retention costs can become significant as the scale of the cloud environment grows.

In terms of specific technical details, CloudHealth Secure State supports over 400 security and compliance rules, includes 40 remediation jobs, and integrates with Kubernetes environments through its Interconnected Kubernetes Security Posture Management feature. The platform also holds SOC 2 Type II certification, ensuring high standards of security, privacy, and process integrity.