Cyera provides an AI-native data security platform designed to protect and govern data across cloud, SaaS, on-premises, and AI environments. The platform utilizes enriched classification, DSPM, and Data Loss Prevention capabilities to surface real risk and enable actionable remediation. This unified approach helps organizations achieve compliance readiness and secure sensitive data at scale with high precision.
Funding
$13M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
Founders
Product
Problem
Managing service-to-service access control in Kubernetes environments is complex, often requiring manual configuration of network policies. This can lead to overly permissive access, increasing the attack surface and creating compliance challenges, while also burdening developers with security tasks.
Solution
Otterize automates intent-based access control for Kubernetes by observing actual traffic patterns and automatically generating least-privilege ClientIntents. These ClientIntents, defined as Kubernetes CRDs, describe the required permissions for a workload, enabling the automated creation of network policies, AWS IAM policies, and database access grants. By automating policy generation and validation, Otterize simplifies security and compliance, reduces developer workload, and enhances the overall security posture of Kubernetes deployments. The platform also provides zero-config network mapping, visualizing traffic flows within and between clusters, as well as to external cloud resources.
Target Audience
Otterize targets DevOps engineers, security teams, and platform engineers responsible for securing Kubernetes environments and ensuring compliance with security policies.
Features
- Automatic generation of least-privilege ClientIntents based on observed traffic patterns.
- Open-source Kubernetes CRD for defining workload permissions.
- Automated creation of network policies, AWS IAM policies, and database access grants.
- Zero-config network mapping for visualizing traffic flows within Kubernetes clusters and to external resources.
- Policy validation and remediation in Git for continuous compliance.
- Integration with CI/CD pipelines for automated security enforcement.
- Support for any CNI and cloud provider.
- Automated report generation for auditing purposes.