This is the slide deck from the April 2019 "What's New With PureSec" webinar. We went through the latest features of the PureSec serverless security platform and did a deepdive technical demo. You can find the recording here: https://youtu.be/ov4xpXjxWws

1. What’s New With PureSec?
Ory Segal, Ron Harnik

2. Introductions
© 2019 PURESEC
Ory Segal
CTO
Ron Harnik
Head of Marketing

3. Helping Build The Serverless Community
• Serverless Top 10 Guide (2018)
• CSA Top 12 risks document (2019)
• Crypto-jacking research paper
• Function-Shield
• Lambda-Proxy
• OWASP ServerlessGoat
• Automatic IAM role generator
• CVEs (Apache OpenWhisk)
• AWS Lambda Security Best-Practices
© 2019 PURESEC

4. What is a Serverless Security Platform?
▪ Serverless-native
▪ End-to-End serverless application security
▪ Prevention & Protection
▪ Application-aware
▪ Governance & security visibility

5. Controls the perimeter of
each function in order to
prevent malicious input
from entering
Controls function
behavior in order to
ensure it works as
intended
Code & configuration
analysis to detect &
mitigate known
vulnerabilities
During CI/CD When Invoked
Deep Visibility
During Execution
Static Analysis Serverless App Firewall Behavioral Protection
Security Posture Management
© 2019 PURESEC

6. Puresec Serverless Security Platform:
The Leading End To End Protection For Serverless
SERVERLESS POSTURE MANAGEMENT
RUNTIME PROTECTION
SECURITY VISIBILITY
SERVERLESS ASSET INVENTORY
VULNERABILITY MANAGEMENT
DETECT IAM & CONFIGURATION ISSUES
CI / CD INTEGRATION
SERVERLESS APPLICATION FIREWALL
BEHAVIORAL PROTECTION W/ ML
BLAZING FAST
PAINLESS DEPLOYMENT REAL TIME APP SECURITY VISIBILITY
DEEP FORENSIC ANALYSIS
SIEM INTEGRATIONS
© 2019 PURESEC

7. QUICK DEMO

8. What’s New?

9. PureSec APIs
▪ Pull security event information
▪ Automate configuration
▪ Easily make bulk changes or updates
Examples:
▪ SecurityAlertFeed
▪ GetFunctionPolicy
▪ SetFunctionPolicy

10. Local Policy Updates
▪ Secure functions during CI/CD
▪ Secure functions inside a private VPC

11. Real Time Email Notifications

12. One more thing...

13. PureSec Now Secures Functions, Containers and Hosts!
▪ Extend PureSec’s runtime defense to containers & hosts
▪ Make the migration path from containers to functions
easier by securing all workloads in the same way
▪ Be serverless ready and get full security coverage -
containers, IoT, hosts, and functions

14. Thank you!
info@puresec.io