> Based on my understanding of CloudGuard we differentiate again by the "automated investigation" we do. It's not just a "you have misconfigured this thing here" but then also "because of that misconfiguration this following resource is now exposed to the internet
CloudGuard does this exact same thing. WE just had our AWS env. scanned and they did tell us that one of our S3 buckets had a wildcarded principle. It documented the exact bucket name and the policy we used.
I agree that the diagram is something I haven't seen from other vendors in the space.
But I am still struggling to understand the differentiation of the other features.
A wildcarded principle by itself doesn't mean too much. There are settings outside of the S3 bucket access policy that can mean "it doesn't matter what the bucket thinks".
This here is something other products typically don't check, and because of that create a lot of noise that a person has to check through.
https://www.youtube.com/watch?v=kMi5PSyFu8s
Other products only look at properties in isolation. As I mentioned the SG rules only become security relevant if many other things in an environment are also true, ARGOS checks for those, others typically don't. Only one example of our "context awareness".
The diagram shows the "kill chain" of how someone could laterally move through your environment, again something others typically don't do.
I said it before, we don't find more, we help you find the ones in the noise that actually matter from a security point of view.
> Based on my understanding of CloudGuard we differentiate again by the "automated investigation" we do. It's not just a "you have misconfigured this thing here" but then also "because of that misconfiguration this following resource is now exposed to the internet
CloudGuard does this exact same thing. WE just had our AWS env. scanned and they did tell us that one of our S3 buckets had a wildcarded principle. It documented the exact bucket name and the policy we used.
I agree that the diagram is something I haven't seen from other vendors in the space.
But I am still struggling to understand the differentiation of the other features.