Cloud security startup The Bridgecrew platform offers developers and DevOps teams a systematic way to enforce infrastructure security standards throughout the application development lifecycle.
Palo Alto Networks has agreed to purchase early-stage bridge crew to ensure cloud security throughout the application lifecycle by codifying infrastructure configuration during development.
The Santa Clara, California-based platform security provider said the San Francisco-based bridge crew platform provides developers and DevOps teams with a systematic way to enforce security standards for infrastructure throughout the development lifecycle. The deal allows Palo Alto Networks to provide developers with security assessment and enforcement capabilities throughout the DevOps process, according to the company.
Bridgecrew is focused on the left shift, where infrastructure configuration is codified during development the company said.
« Shift Left Security is a must in any cloud security platform, » said Nikesh Arora, CEO of Palo Alto Networks, in a statement. « Developers don’t want to wait until runtime to find out that their security isn’t working, and the CISO, who is tasked with protecting the entire company, appreciated greater security before troubleshooting issues earlier in the development lifecycle. » / p>
[See also: Attack Surface Lockdown: Palo Alto Networks buys Expanse for $ 800 million]
The $ 156 million acquisition of Bridge Crew by Palo Alto Networks is expected to close in late April. The transaction is not expected to have a material impact on the company’s finances. The company’s stock remains unchanged at $ 395.12 on the Tuesday leading up to trading. Palo Alto Networks declined to provide CRN with an executive for further comment, citing the dormant period prior to the company’s profit.
Bridgecrew was founded in 2019, has 49 employees and has raised $ 18.1 million in two external funding rounds, according to LinkedIn and Crunchbase. All three of Bridgecrew’s co-founders – CEO Idan Tendler, Chief Technology Officer Barak Schoster, and Vice President of Product Guy Eisenkot – and their teams will join Palo Alto Networks, the company said.
« We are dedicated to creating tools that developers create first and bridge the gap between developers and cloud security, » said Tendler in a statement. « By joining Palo Alto Networks, we can bring more codified cloud security to the developer community. »
Bridgecrew’s open source scanner, Checkov, made significant advances early on with developers, performing more than 1 million downloads in 2020 – the first full year of availability according to the company. According to Palo Alto Networks, Bridgecrew’s complete security platform made good progress early on in many cloud-first organizations, including Robinhood, Databricks, and LendingHome.
Palo Alto Networks announced that it will continue to invest in Bridgecrew’s open source initiatives as part of its ongoing commitment to DevOps security. The Bridgecrew product makes it easy to identify and fix problems as early as possible in the development process, wrote Lee Klarich, chief product officer of Palo Alto Networks, in a blog post on Tuesday.
By fixing issues at source, Klarich says the templates are backed up before they are deployed to hundreds of workloads, resulting in a massive reduction in security warnings. Bridge crew warns development teams of security issues in real time. According to Klarich, this will maximize developer productivity and allow security teams to focus on critical security threats at runtime.
« [Historically] all security flaws made in … a template are replicated on every deployment, and then are all these errors are flagged by cloud security products every time they are deployed, « Klarich wrote in the blog post. « A single mistake can easily lead to thousands of warnings. »
By combining Palo Alto Networks and bridge crew, more security controls can be embedded earlier in the development lifecycle. According to Klarich, this will lead to fewer compliance errors, faster correction time and less friction between security and development teams. The deal will also open up more opportunities for Palo Alto Networks to connect with the developer community, Klarich said.
Including the planned bridge crew deal, Palo Alto Networks has raised $ 3.46 billion for 12 Acquisitions issued. Some of the larger deals include: the acquisition of attack surface management provider Expanse in October 2020 for $ 800 million; the acquisition of analytics and automation provider Demisto in February 2019 for $ 560 million; and the purchase of the CloudGenix SD-WAN player in March 2020 for $ 420 million.
Ref: https://www.crn.com
