▾ G11 Media Network: | ChannelCity | ImpresaCity | SecurityOpenLab | GreenCity | Italian Channel Awards | Italian Project Awards | ...
InnovationOpenLab

Venafi Secures Workload Identities Across Cloud Native Environments With New SPIFFE Support for Venafi Firefly

(KubeCon + CloudNativeCon Europe 2024) — Venafi, the inventor of machine identity management, today introduced SPIFFE (Secure Production Identity Framework For Everyone) support for Venafi Firefly, ...

Business Wire

New Capability Enables Security Teams to Ensure Governance and Reduce Risk, While Empowering Platform Teams to Accelerate Development

PARIS: (KubeCon + CloudNativeCon Europe 2024) — Venafi, the inventor of machine identity management, today introduced SPIFFE (Secure Production Identity Framework For Everyone) support for Venafi Firefly, Venafi’s industry-first lightweight workload identity issuer uniquely designed to support modern, highly distributed cloud native workloads. As workload identity plays an increasingly fundamental role in cloud native architectures, today’s modern applications require an automated way to scale and secure heterogeneous workloads that are short-lived. By leveraging SPIFFE’s open source framework of identity standards, Venafi Firefly customers can now easily secure and govern workload identities across complex, dynamic development environments such as Kubernetes without slowing down innovation.

“The cloud native tsunami is making workload identity the focus for both security teams and adversaries. Knowing what workload is allowed to authenticate is only getting harder with more clouds, more clusters and more microservices,” said Kevin Bocek, chief innovation officer at Venafi. “There’s an urgent need to ensure workload identities are governed and consistent across many teams and applications in a modern business. Security teams want to know how and why workloads are being authenticated without getting in the way of business-changing apps.”

Unlike secrets managers and legacy PKIs that can’t support modern, decentralized approaches, Venafi Firefly with SPIFFE can easily and reliably mutually authenticate workloads across dynamic, multi-cloud environments using short-lived, verifiable identities managed by the Venafi Control Plane. As a result, security and platform teams can effectively secure workload identities across all environments while significantly reducing operational complexity and costs.

“Venafi Firefly goes beyond conventional workload identity management. It bridges the gap between security compliance and platform team efficiency by providing a unified, automated approach to seamlessly authenticate workloads in modern, cloud native environments,” said Shivajee Samdarshi, chief product officer at Venafi. “It automatically issues each workload with its own identity and creates an enterprise-wide trust root system to secure and authenticate workloads across any infrastructure. With SPIFFE support now added, platform teams can use Venafi Firefly to consume SPIFFE-compatible identities and seamlessly authenticate workloads for improved workload identity governance and trust.”

Venafi Firefly’s new SPIFFE capability offers security teams:

  • Enhanced Governance and Security Compliance – Firefly with SPIFFE allows security teams to adopt a recognized industry standard for workload identity and security. This improves governance and security compliance for authenticating workload identities in highly scalable, cloud native environments.
  • Secret-Less Authentication – Using Venafi Firefly, security teams can establish verifiable and ephemeral workload identities, underpinning a zero-trust architecture that eliminates the need for persistent, long-term secrets in certificates. Venafi Firefly automatically rotates and renews SPIFFE identities, which significantly mitigates the risks associated with secrets compromise or leakage.

Additionally, it offers platform teams:

  • Advanced Automation for Workloads Across Multi-Cloud Operations Venafi Firefly’s support for SPIFFE delivers a unified workload identity system, which helps platform teams remove the complexity and challenges of managing different workload identity systems from different cloud providers. This enables platform teams to simplify their operations and scale highly efficient, secure development environments across any public cloud, on-premise or hybrid setup.
  • Simplified Service Mesh Operation With Automatic Mutual TLS (mTLS) – Using Venafi Firefly to authenticate SPIFFE identities enables simplified authentication and attestation of workloads. This creates secure trust domains using mTLS within Istio service meshes. Venafi Firefly scales trust domains by seamlessly enforcing identity and trust for workloads across multiple public cloud infrastructures and service mesh environments.

To learn more about Venafi Firefly, please visit https://venafi.com/firefly/ or visit Venafi in Booth L8 at KubeCon + CloudNativeCon Europe 2024.

About Venafi

Venafi is the cybersecurity market leader in machine identity management. From the ground to the cloud, Venafi solutions manage and protect identities for all types of machines—from physical and IoT devices to software applications, APIs and containers. Venafi provides global visibility, lifecycle automation and actionable intelligence for all machine identity types and the security and reliability risks associated with them.

With more than 30 patents, Venafi delivers innovative machine identity management solutions for the world's most demanding, security-conscious organizations and government agencies, including the top five U.S. health insurers, top five U.S. airlines, top four payment card issuers and top four U.S. banks. As a leading provider of open source machine identity management solutions, Venafi is the creator of the open source cert-manager project, which is downloaded more than 1.5 million times a day. For more information, visit https://venafi.com/.

Fonte: Business Wire

If you liked this article and want to stay up to date with news from InnovationOpenLab.com subscribe to ours Free newsletter.

Related news

Last News

The Etna Valley will be a main European semiconductors hub

The EU ChipsJU program will fund the development of innovative semiconductors production lines in Catania, thanks to an international consortium led by…

Bending Spoons acquires StreamYard

The Italian tech company has entered into an agreement to buy the US based live-streaming and video-recording business

HR startup's market is on fire, ask to Factorial

Factorial secures $80M of Go-To-Market investment from General Catalyst to accelerate growth.

Awentia brings Italian Deep Tech to South America

From Imola, Awentia Agritech will take its Smart Agriculture technologies to Argentinian companies Ava Fruit, Doña Paula and Bodega A16

Most read

The Etna Valley will be a main European semiconductors hub

The EU ChipsJU program will fund the development of innovative semiconductors production lines in Catania, thanks to an international consortium led by…

Newsletter signup

Join our mailing list to get weekly updates delivered to your inbox.

Sign me up!