What is Protego?

Protego’s serverless security technology provides unmatched visibility, security, and control over serverless applications from development to runtime.

Protego Proact:

Save Time & Increase Security with Automatic Application Hardening
Protego Proact analyzes your serverless application code before and after deployment, and helps you maximize your application’s security posture with automation, minimize the attack surface, and simplify governance.

Minimize Attack Surface and Improve Security Posture
Protego’s breakthrough code analysis technology detects configuration risks and automatically generates least-privilege function permissions. Protego clearly outlines recommended steps to remediate, enabling you to drive remediation of posture at scale.

• Automatically generate least privilege IAM roles during CI/CD and runtime
• Detect and Alert over provisioned function timeout configurations
• Native integration with task management & reporting tools
• Supports all common programming languages

Serverless Security Vulnerability Management
Protego scans functions for known vulnerabilities and embedded secrets ensuring your applications are not exposed to attacks.

• Based on a constantly updated CVE sources & proprietary secret detection algorithms
• Scans functions during CI/CD to prevent deployment of vulnerable functions
• Continuous scanning of run time functions and alerts on new vulnerabilities present in deployed applications

Native CI/CD Integration
Protego provides native plug-ins as well as a CLI tool that automate function scanning within CI tools.

• Native support for Serverless.com, Jenkins, AWS SAM, AWS CloudFormation, APEX, and others.
• Lets developers view scanning results and suggested mitigation from within a familiar environment.
• Allows Security and SecDevOps teams to prevent functions that violate policy from being deployed or enforce pre defined security controls.

Protego Defend

Detect and Stop Serverless Application Attacks with Accuracy & Speed
The Protego serverless security solution continuously scans your serverless infrastructure, code, and runtime environment. Utilizing machine-based analysis and deep learning algorithms, Protego builds a model of normal application and function behavior to detect and stop application layer attacks.

Trigger Agnostic Application Layer Protection & Forensics
Protego’s Function Self Protection detects, alerts & stops application layer attacks such as the Serverless OWASP Top 10 and anomalous activity independent of the attack trigger.

• Detects & stops application attacks such as SQL & Injection and others, independent of input source
• Detect & stop anomalous & malicious actions (e.g calling an external destination) or interactions (calling a sub process)
• Move from alert to prevent mode and vice versa in real time

Automatically Profile Function and Application Behavior
Protego continuously monitors your serverless application activity and automatically creates a white list of actions and interactions on a resource level.

• Discover and visualize serverless application structure, behavior & flow
• Automatically generate a white list of ‘good behavior’ including system access, external communications, triggers and more.
• Define custom policies and enforce behavior on a per function level.

Serverless Security Platform Integrations for Alerting & Forensics
Get real time alerts, view an audit trail for events in full context, unmask compromise indicators and analyze event context.

• Pre-built Splunk and cloud watch integration for analysis and audit
• Pre-built integrations with tools such as Slack and Jira for security incident alerts
• Full REST API access allows integrations with other systems

Unified View of Serverless Application Posture & Forensics
The Posture Explorer provides a single, comprehensive view of your entire serverless ecosystem

• Application and function view of all inputs and triggers
• Detect & alert on configuration issues, such as unlinked triggers and unused resources
• Security-focused visualization of potential risk areas
• Clear indication of posture score and status

Protego Observe

Compile Billions of Signals into Application Visibility and Attack Detection
The Protego serverless security solution continuously scans your serverless infrastructure, code, and runtime environment, to collect and correlate hundreds of data points. With machine-based analysis and deep learning algorithms, Protego builds a model of normal function behavior to effectively detect threats, anomalies, and malicious attacks as they initiate and propagate.

Actionable Serverless Security Intelligence and Forensics

Protego provides actionable intelligence and the tools to provide full visibility and root cause analysis. The Platform provides unified evidence of security events by correlating the numerous data points related to each incident, rather than overwhelming the user with a flood of singular events. All relevant and historical data can be extracted to enable security experts to conduct forensic investigations post-attack.

Insight and Control to Achieve Compliance

Protego helps enterprises worldwide achieve and enforce compliance with requirements such as HIPAA, FISMA, PCI, and GDPR. The Protego Security Explorer provides the tools, such as data encryption, to help you achieve compliance by enforcing rules defined by your organization.