VMware Aria Automation for Secure Clouds

(formerly CloudHealth Secure State)

Reimagine Cloud Security. Visualize how attackers move laterally by exploiting resource relationships, misconfigurations, & entitlements. Leverage real-time detection, machine learning, & automation to stay on top of critical cloud risks.

GET FREE ACCOUNT

Reimagine Cloud Security

All-in-One Platform

Get CSPM, KSPM, CIEM, & Threat Correlation as one integrated cloud configuration security solution.

Deeper Context

Find risks that others don’t by visualizing and correlating resource relationships with misconfigurations, entitlements, and threats.

Faster Response

Detect 95% security violations in less than 6 seconds of a change notification and automate remediation securely.

Operational Ease

Protect thousands of cloud accounts at scale with fewer false positives, automated workflows, and customer success guidance.

SEE SECURITY CHECKLIST GET BEST PRACTICES EBOOK

VIEW THE REPORT

Key Capabilities

Visual Context

Enable developer, security, and operations teams to get on the same page quickly by delivering a visual understanding of misconfiguration risk.

Advanced Detection

Identify lateral movement & privilege escalations by assessing connections between misconfigured Kubernetes and cloud resources.

IAM  Visibility 

Improve visibility into which users or machines have access to which cloud resources to reduce unnecessary and excess privileges.

Coverage Depth

Gain a comprehensive understanding of security & compliance posture with support for over 350 cloud resources, 1100 rules, & 20 compliance frameworks.

Threat Correlation

Prioritize critical threats, understand actual risk, and visualize the chain of attack by correlating anomalies with open security violations.

Low-Code Investigation

Search & reduce investigation time from days to minutes by navigating resource relationships with real-time visibility and write custom rules with click-through query builder.

Automated Suppressions

Reduce false positives with workflows that enable developers to request time-bound exceptions and admins to automate approvals.

Secure Remediation

Click to fix known violations and automate remediations to proactively resolve new violations while maintaining read-only access to your cloud within our SaaS platform.

Visual Context

Enable developer, security, and operations teams to get on the same page quickly by delivering a visual understanding of misconfiguration risk.

Advanced Detection

Identify lateral movement & privilege escalations by assessing connections between misconfigured Kubernetes and cloud resources.

IAM  Visibility

Improve visibility into which users or machines have access to which cloud resources to reduce unnecessary and excess privileges.

Coverage Depth

Gain a comprehensive understanding of security & compliance posture with support for over 350 cloud resources, 1100 rules, & 20 compliance frameworks.

Threat Correlation

Prioritize critical threats, understand actual risk, and visualize the chain of attack by correlating anomalies with open security violations.

Low-Code Investigation

Search & reduce investigation time from days to minutes by navigating resource relationships with real-time visibility and write custom rules with click-through query builder.

Automated Suppressions

Reduce false positives with workflows that enable developers to request time-bound exceptions and admins to automate approvals.

Secure Remediation

Click to fix known violations and automate remediations to proactively resolve new violations while maintaining read-only access to your cloud within our SaaS platform.

Use Cases

Reduce security investigation time from days to minutes

Understand what developers build in cloud with real-time graph search supporting 350+ cloud resources. Query multiple cloud providers, accounts, and regions with a low-code investigation approach. Visualize relationships between resources to understand cloud architecture and different paths an attacker can take to move laterally in a security breach.

Scale over 1000 multi-cloud configuration security best practices

Misconfigurations are the leading cause of public cloud security breaches. Improve your cloud’s security posture with real-time visibility into misconfigured resources and connections to other cloud services. Quantify and prioritize risk based on security blast radius and enable developers to auto-remediate violations.

Prevent attackers from moving across Kubernetes & cloud infrastructure

Secure public cloud and Kubernetes infrastructure with an integrated cloud native security platform. Automatically discover managed clusters and identify risky Kubernetes misconfigurations in cloud and data center. Visualize relationships between Kubernetes and cloud infrastructure to prevent accidental data exposure or access to privileged cloud credentials.

Improve compliance with support for 20+ regulatory standards

Continuously benchmark compliance across ephemeral cloud resources with real-time assessment of regulatory controls. Leverage pre-defined industry & government specific regulatory benchmarks or build company specific custom compliance frameworks. In a single view, track compliance with all frameworks and progress made in resolving issues. Automate reporting and maintain a thirteen-month compliance audit history.

Identify unused or excessive privileges across cloud infrastructure

Streamline cloud identity and access management by visualizing who has access to which resources and what permissions across the cloud infrastructure. Easily prioritize risk by grouping resource types an identity can access and isolating sensitive permissions an attacker can abuse in the event of a security breach.

Build guardrails with continuous CI / CD verification

Take a “Shift left” security approach to reduce cost and time spent on fixing violations. Use API to integrate security and compliance best practices within CI/CD pipelines. Proactively identify and remediate violations before a deployment hits production. Continuously monitor drift, alert developers, and collaborate to scale cloud security.