Threat Stack Announces Enhanced Compliance Functions to Accelerate Audits with New Reporting

Unique compliance classifiers and comprehensive reporting assist with compliance framework requirements helping organizations to accelerate the audit process

BOSTON — Threat Stack, the leader in cloud security and compliance for infrastructure and applications, today announced two new product capabilities to the Threat Stack Cloud Security Platform®, compliance classifiers and enhanced compliance reporting. New compliance classifiers detect events in real-time and map them to specific compliance framework requirements. Threat Stack’s new compliance reporting allows for ad hoc and scheduled reports against classified events collected and analyzed monthly. Both of these features are aimed to simplify compliance and accelerate audits for cloud-native organizations.  

Achieving and maintaining compliance with major frameworks such as SOC 2, HIPAA, PCI DSS, and ISO 27001 are important milestones for cloud-first organizations. Protecting customer data is integral to building customer trust, and many prospects often require it before purchasing services or solutions. Compliance classifiers allow Threat Stack customers to assign its industry-leading rules directly to any framework, supplying security leaders with a clear picture of their current compliance posture. Rules can also be set without any alerting, allowing customers to monitor priority alerts while still maintaining compliance. Rule labeling gives security leaders the control to make and implement changes required to satisfy the compliance certification.

Additionally, Threat Stack now equips customers with new compliance reporting. Monthly reports are delivered directly within the platform, collecting and centralizing the required information needed to pass security components for compliance audits i.e., the rules in place to protect certain data and the corresponding controls for implementing the rules. Compliance reports are aligned to specific compliance frameworks and are easily accessible so customers can respond to ad hoc audit requests.

“Traditional approaches to compliance no longer scale with today’s complex stack of diverse infrastructures and applications. The Threat Stack Cloud Security Platform diminishes the nuisances surrounding compliance and accelerates the audit process through advanced reporting,” said Chris Ford, VP of Product at Threat Stack. “As we continue on our path of innovation by maturing our platform and compliance capabilities, these key enrichments, compliance classifiers and comprehensive reporting, give our customers the added support needed to achieve their security and compliance goals.” 

Threat Stack supports the entire compliance lifecycle by helping organizations to observe, classify, demonstrate, and maintain compliance. Through Threat Stack’s Oversight℠ and Insight℠ services, organizations have 24/7/365 SOC and advisory support to monitor environments and ensure continuous security for compliance beyond initial audits. 

To learn more, visit: https://www.threatstack.com/use-cases/cloud-compliance

Sobre F5

A F5 é uma empresa de serviços de segurança e aplicativos multinuvem comprometida em dar vida a um mundo digital melhor. A F5 faz parcerias com as maiores e mais avançadas organizações do mundo para proteger e otimizar todos os aplicativos e APIs em qualquer lugar, no local, na nuvem ou na borda. A F5 permite que as organizações forneçam experiências digitais excepcionais e seguras para seus clientes e estejam continuamente à frente das ameaças. Para mais informações, acesse f5.com . (NASDAQ: (FFIV)

Você também pode seguir @F5 no Twitter ou nos visitar no LinkedIn e no Facebook para obter mais informações sobre a F5, seus parceiros e tecnologias. F5 é uma marca comercial, marca de serviço ou nome comercial da F5, Inc. nos EUA e em outros países. Todos os outros nomes de produtos e empresas aqui contidos podem ser marcas comerciais de seus respectivos proprietários.

# # #

Este comunicado à imprensa pode conter declarações prospectivas relacionadas a eventos futuros ou desempenho financeiro futuro que envolvem riscos e incertezas. Tais declarações podem ser identificadas por terminologia como "pode", "irá", "deve", "espera", "planeja", "antecipa", "acredita", "estima", "prevê", "potencial" ou "continua", ou a negativa de tais termos ou termos comparáveis. Essas declarações são apenas previsões e os resultados reais podem diferir materialmente daqueles antecipados nessas declarações com base em uma série de fatores, incluindo aqueles identificados nos registros da empresa na SEC.