Expanded capabilities allow organizations to broaden protection of sensitive data across multi-cloud estates without requiring additional tools

PORTLAND, Ore.: Orca Security, the pioneer of agentless cloud security, today announced a significant expansion of its comprehensive Data Security Posture Management (DSPM) capabilities with support for Snowflake. The Orca Cloud Security platform now detects and alerts customers to sensitive data in Snowflake data lakes, from the same platform that they use to secure their cloud provider environments.

Data warehouses are designed with security configuration settings that ensure sensitive data such as personally identifiable information (PII), credit card data, healthcare information, as well as developer keys, secrets, and tokens, can be stored securely. According to Orca Security’s 2024 State of Cloud Security Report, however, 20% of organizations have a public-facing database with sensitive data. This highlights the importance of ensuring that these assets are configured correctly. Exposing them to the public can leave organizations vulnerable to data exfiltration, ransomware, reputational damage, and regulatory penalties.

“As organizations collect and store increasing amounts of personal, financial, and business-critical data, the risk of cyberattacks and data breaches grows,” said Arie Teter, chief product officer at Orca Security. “At the same time, rapid AI adoption requires large amounts of data to train AI models that perform effectively, increasing the complexity and scale of data that organizations need to manage. Our support for Snowflake shows that Orca continues to deliver on its promise to provide the most comprehensive cloud security solution from a single, unified platform.”

Orca now continuously detects sensitive data at risk in managed and self-hosted Snowflake data stores, in addition to all files on virtual machines, containers, and cloud storage buckets across multi-cloud environments. Once connected to a Snowflake database, Orca leverages its patented, agentless SideScanning™ technology to search for sensitive information using over 90 built-in data classifiers, covering categories like PII, personal health information (PHI), and payment card information (PCI). In addition, customers can create their own custom identifiers using regular expressions, enabling them to customize their data classifications. Any sensitive information is automatically flagged, so teams are aware of its presence and can ensure that it is appropriately secured or removed.

As opposed to point DSPM tools that focus solely on data security, Orca takes a more expansive view and combines data intelligence with other cloud risks–including vulnerabilities, malware, misconfigurations, lateral movement risks, identity and access risks, and API risks.

Orca combines its comprehensive cloud risk insights to apply Attack Path Analysis and identify opportunities for attackers to combine different weaknesses in the cloud environment to expose sensitive data, such as PII, PHI, and PCI data. Each attack path is automatically scored based on several criteria, including exploitability, severity, and business impact, allowing security teams to focus on remediating the risks that pose the greatest danger to the organization’s sensitive data, while reducing alert fatigue and preventing potentially damaging data breaches.

Support for Snowflake in the Orca Cloud Security Platform is available today in beta per customer request. To learn more, read the blog, or sign up for a demo to see how quickly and easily the Orca Cloud Security Platform can help identify and address data risks.

About Orca Security

Orca Security is the pioneer of agentless cloud security trusted by hundreds of enterprises globally. Orca makes cloud security possible for enterprises moving to and scaling in the cloud with its patented SideScanning™ technology and Unified Data Model. The Orca Cloud Security Platform delivers the world’s most comprehensive coverage and visibility of all risks across the cloud. With continuous first-to-market innovations and expertise, the Orca Platform ensures security teams quickly identify and remediate risks to keep their businesses secure. Connect your first account in minutes: https://orca.security or book a personalized demo.

Fonte: Business Wire