Visibility and security: Protecting your cloud infrastructure

As cloud technologies spread, so does the risk of cyber attacks on cloud infrastructure. To counter this trend, we at blacklens.io developed a solution that gives our customers deeper insight into, and more visibility of, their existing and new cloud environments. With cloud scanning in blacklens.io, you can check the security status of your cloud providers, from AWS and Google Cloud to Microsoft Entra and Azure, quickly and easily, and address security issues in a targeted way.

Step by step: set-up and first steps

Setting up a cloud provider is simple. In the integration options, choose Azure, AWS or Google Cloud Platform (GCP). After set-up, you decide whether your assets, such as IP addresses, load balancers and web apps, should be added automatically, and whether you also want to audit existing resources such as IAM and other provider-specific assets.

Practical example: cloud auditing of an Azure tenant

In a practical example, we enabled cloud auditing for a Microsoft Azure tenant. Among the first results was a weakness in our own Conditional Access policy. It could have allowed an attacker to bypass the policy and authenticate with a single factor. The weakness was re-checked at short notice and automatically marked as resolved once it had been fixed.

Because blacklens.io continuously scans your cloud environments for new threats and vulnerabilities, security scans are quick to set up. They improve security and support compliance audits at the same time.

Asset synchronisation: automated monitoring of your cloud resources

Asset synchronisation in blacklens.io adds the resources you run in the cloud to the scanning process automatically. The sync runs every 168 hours by default, and Run scan now starts it at any time. Newly created assets, such as virtual machines, load balancers and web apps, are captured automatically, scanned and monitored.

Cloud security as an ongoing task

Security in the cloud remains an ongoing task that calls for a proactive and dynamic approach. Cloud scanning in blacklens.io gives fast, in-depth insight into the security posture of your cloud infrastructure and supports the management and remediation of potential risks. The platform helps you keep the overview and simplify compliance while it continuously monitors your cloud resources for new threats. How cloud scanning helps with NIS2 evidence is covered in the post on unified cloud vulnerability scanning.