Cyscale

Cyscale is a comprehensive Cloud-Native Application Protection Platform (CNAPP) designed to provide organizations with deep visibility and robust security across your cloud environments. By connecting all your cloud environments and identity providers (IdPs), Cyscale enables instant visibility and proactive security measures across all regions.

Highlights

1. Inventory and explore your cloud infrastructure: Want to find all publicly accessible EC2 instances? Want to see all elastic IPs that are not in use? Want to find all publicly accessible S3 buckets? Cyscale is there for you with its inventory and simple-to-use query builder.

2. Secure your resources: Cyscale builds a graph of your cloud resources, enabling in-depth security scanning and contextual alerts. It's one thing to have a security group that allows all traffic that's not in use and another to have the same security group attached to multiple EC2 instances that can access S3 buckets and Dynamo DB tables. The same applies to IAM principals, container/Kubernetes workloads, and more.

3. Stay compliant: All checks performed by Cyscale are linked to compliance frameworks, CIS benchmarks, and directives, enabling you to quickly answer compliance questions, generate reports, and stay up-to-date with internal and external requirements.

Here is what Cyscale excels at:

- Agentless discovery and visibility of your cloud resources. You can also see how these resources relate, such as the S3 buckets an EC2 instance or Lambda function can access through their IAM role.

- Understanding the context of each resource. For example, the network configuration, CVEs reported by Amazon Inspector, and IAM permissions for EC2 instances. With this, you can, for example, find EC2 instances impacted by the latest critical vulnerability and allow public traffic on specific ports.

- CIS Benchmark and compliance coverage: Cyscale aims to automate at least 80% of the latest CIS Benchmark controls, enabling you to assess your security and compliance posture within minutes.

Note: Kubernetes integration requires deploying an agent via a Helm chart guided by Cyscale. This provides real-time inventory of your Kubernetes workloads.

Here is what Cyscale does NOT do:

- runtime detection

- log analysis

- IaC/code scanning

However, we can help you find complementary (possibly free/open-source) tools for these requirements.