SAN FRANCISCO, June 12, 2023 (GLOBE NEWSWIRE) -- Cycode, the leading application security platform, today announced the launch of Cimon, a seamless solution that enhances the security of CI/CD pipelines to prevent software supply chain attacks such as those that targeted SolarWinds and Codecov.
CI/CD pipelines currently lack visibility, making them the most sensitive link in the SDLC, and many organizations have thousands of unmonitored pipelines prone to supply chain attacks. Cimon stops these attacks by utilizing the innovative solution of eBPF (extended Berkeley Packet Filter), a technology that provides visibility into the build system, including thwarting malicious behavior, with minimal disruption.
With this visibility, Cimon can inspect network connections to learn standard behaviors by running processes and file modifications within the CI pipeline. This knowledge enables Cimon to detect and prevent abnormalities, including real-time threats and zero-day attacks.
"There is a great deal of confusion about the scope of the software supply chain and all the attack vectors; consequently, most organizations are unaware of their exposure and are inadequately protected, leaving them prone to supply chain attacks. The innovation delivered by the Cycode Cimon solution provides the community with a new and straightforward way to monitor and safeguard their CI/CD software pipelines," said Jim Mercer, Research Vice President of DevOps and DevSecOps at IDC.
With Cimon, organizations can expect:
- Prevention of CI Attacks: With low effort and seamless integration, users remain protected against all possible attacks on the CI pipeline, including zero-day attacks.
- Instant Threat Detection: Cimon prevents attacks such as malicious package installation, typosquatting, repojacking, dependency confusion, dependency hijacking and other dependency attacks.
- Easy Integration: Cimon is developer friendly and is easily integrated with popular CI/CD tools. Cimon provides comprehensive documentation and requires minimal configuration and integration with the development environment, such as GitHub.
“Organizations can easily integrate Cimon with all their CI/CD tools for free and secure their pipelines without any delay or errors,” said Ronen Slavin, co-founder and CTO of Cycode. “As Cimon saves time in vulnerability and threat response procedures, teams can implement and adopt security measures without any worry of error or exhaustion.”
Cimon is the new superhero for organizations’ CI/CD pipelines and is free to use. More information about Cycode and Cimon is available online.
About Cycode
Cycode's modern approach to application security enables organizations to effectively secure their cloud-native applications with cost-efficient use of tooling and staff across the SDLC. The Cycode platform makes AppSec tools better through its Knowledge Graph, which provides complete context of the SDLC to improve accuracy and reduce mean-time-to-remediation (MTTR). Cycode merges the top eight AppSec tools into the industry’s most advanced and comprehensive AppSec platform. By correlating data across these tools, Cycode offers new capabilities such as Pipeline Composition Analysis, which identifies vulnerable dependencies and security issues missed by legacy tools like SCA and SAST across the entire SDLC; pinpoints vulnerable dependency locations; and prioritizes threats by exploitability.
Media Contact:
Chloe Amante
Montner Tech PR
camante@montner.com
Photos accompanying this announcement are available at:
https://www.globenewswire.com/NewsRoom/AttachmentNg/cb08fd03-19c8-4172-961f-9b25f337ec35
https://www.globenewswire.com/NewsRoom/AttachmentNg/29f1fa2b-4cf8-44c5-a4a1-f2c71b583bcb
