Tenable Integrates Terrascan Into Nessus to Enable Secure Cloud Application Delivery

Rhea-AI Summary

Tenable has integrated Terrascan into its Nessus platform, enhancing cloud security capabilities for developers. This open-source Infrastructure as Code scanner allows for early detection of security issues in cloud applications. With over 500 predefined security policies, Terrascan helps streamline the development process by automating cloud security assessments, ultimately speeding up delivery and reducing risks. Tenable remains committed to the Terrascan community, focusing on usability and further development.

Positive

• Enhanced cloud security through integration of Terrascan into Nessus.
• Terrascan offers over 500 predefined security policies for early issue detection.
• Automation of security assessments accelerates the software development lifecycle.

Negative

• None.

Added firepower helps security and DevOps teams ensure that only secure infrastructure and software are launched in the cloud

COLUMBIA, Md., May 17, 2022 (GLOBE NEWSWIRE) -- Tenable^®, the Cyber Exposure company, today announced Nessus now includes Terrascan, the leading open-source cloud security analyzer that helps developers secure Infrastructure as Code (IaC). The integration into Nessus continues to further Tenable’s broader cloud strategy, helping enterprises secure their full cloud stacks both during build time and at runtime. The combined solution helps the Nessus user community address security operations and cloud application infrastructure.

Terrascan is an open-source IaC security analyzer that enables cloud developers to scan infrastructure code and find security issues as part of the software delivery process. With more than 500 out-of-the-box policies, it helps identify issues such as missing or misconfigured encryption on resources and communication, and inadvertent exposure of cloud services.

Terrascan enables cloud engineers to test infrastructure code against security policies early in the development process, when it’s least costly and disruptive to fix. It provides more confidence when “shifting left” and makes secure design an integral part of the DevOps process. As organizations move full steam ahead with their cloud, ‘as code’ and containerization projects, they increase their attack surface. Nessus with Terrascan lets them innovate and simultaneously address security concerns.

“Infrastructure as Code is about making development and cloud delivery programmatic and efficient. Adding Terrascan to Nessus will enable the Nessus community to more easily validate the configuration state of modern infrastructure before it gets deployed, giving cloud developers peace of mind, knowing that the process can be managed securely,” said Glen Pendley, chief technology officer, Tenable. “Terrascan will remain open source. We are not changing the model, and we value and are committed to the Terrascan community, with plans for additional development and investments to increase usability and accessibility.”

The benefits that Terrascan adds to Nessus include:

• Increased delivery speed – eliminates lengthy pre-production security gates by automating cloud-native security assessments early in the software development lifecycle.
• Reduced risk – helps Cloud DevOps teams avoid releasing insecure software into the cloud and reduces potential windows of risk.
• Rapid time to value – takes advantage of over 500 predefined, standards-based policies to test a broad range of IaC for alignment with security benchmarks.
  

For more information about Terrascan, click here and to learn more about the integration with Nessus, please read this blog post.

About Tenable
Tenable^® is the Cyber Exposure company. Approximately 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. As the creator of Nessus^®, Tenable extended its expertise in vulnerabilities to deliver the world’s first platform to see and secure any digital asset on any computing platform. Tenable customers include approximately 60 percent of the Fortune 500, approximately 40 percent of the Global 2000, and large government agencies. Learn more at tenable.com.

Media Contact:
Tenable
tenablepr@tenable.com

FAQ

What new features does Tenable offer for Nessus with the addition of Terrascan?

Tenable has integrated Terrascan into Nessus, providing enhanced security capabilities for cloud applications and over 500 predefined security policies for early issue detection.

How does Terrascan improve security for cloud infrastructure?

Terrascan enables cloud developers to scan infrastructure code early in the development process, automating security assessments to reduce risks.

What type of organizations can benefit from the new features in Nessus?

Any organization utilizing cloud infrastructure, especially those practicing DevOps, can benefit from the enhanced security features provided by the integration of Terrascan into Nessus.

Is Terrascan going to remain open source after its integration with Nessus?

Yes, Tenable confirmed that Terrascan will remain open source, with ongoing commitments to the community for further development.