First-of-its-kind framework takes an architectural approach to cloud security, includes a bring-your-own-language model, and removes vendor lock-in to scale security
CHICAGO, April 19, 2023 /PRNewswire-PRWeb/ -- Development teams leverage Infrastructure as Code (IaC) automation to make fast and frequent changes to their cloud native architectures. The only way for security teams to keep pace with rapidly evolving software development is to embrace automation and codify security.
Now, there's a framework that makes Security as Code (SaC) available to everyone.
oak9, developer-first cloud native security leader, has released Tython, the first and only open-source SaC framework and software development kit (SDK) with a bring-your-own-language model to eliminate the challenges of existing tools and scale cloud security. Tython allows security teams to build custom security reference architectures and design patterns as code.
oak9's security architecture team has been using Tython internally for years to codify industry reference architectures from organizations like Cloud Security Alliance, NIST, AWS, Azure, GCP, OWASP, and more. The team recognized the importance of opening this framework to the larger community.
"Almost every security architecture practice we speak with wants to build reference architectures, but they just don't have the time," said Aakash Shah, Chief Technology Officer and Co-Founder at oak9. "Tython gives the community a way to collaborate in building security best practices and the ability to easily implement the policies they need in whichever programming languages they choose, so they can effortlessly scale within their organization."
Tython revolutionizes how security and development teams operate and collaborate — it democratizes security for developers, enables development and security to operate autonomously, and creates shared responsibility around security.
Within minutes, users can clone the Tython repository from Github, and build and test their security blueprints. With the power of the oak9 platform, Tython not only identifies security design gaps, but also fixes them, regardless of the IaC language and cloud service provider (CSP) the developer chooses to use.
"Tython goes well beyond configuration management approaches of existing policy-as-code languages and helps security holistically assess the entire cloud architecture," continued Shah. "Security, compliance, and governance guardrails defined in Tython are enforced across the entire software development lifecycle — from design to post-deployment — automatically, giving developers real-time feedback for any change they make."
oak9 will share more about Tython at RSA Conference 2023 in San Francisco. Join oak9's session "A Journey in Building an Open Source Security as Code Framework" presented by Shah in-person on Thursday, April 27, 2023 at 8:30 a.m. PT / 10:30 a.m. CT, or catch the online stream.
Tython is being offered to current oak9 customers in beta. New and prospective customers interested in using Tython can contact oak9 directly.
Learn more at tython.io.
About oak9
oak9 secures cloud native infrastructure for developers. oak9 Security as Code continuously finds, analyzes, and remediates security and compliance issues in real-time, as changes occur in Infrastructure as Code or in the cloud. oak9's catalog of Security as Code (SaC) blueprints support 20-plus compliance standards out-of-the-box including HIPAA, HITRUST, PCI, SOC2 and ISO27001. oak9's open-sourced Security as Code also enables security engineers to extend oak9 security blueprints for additional guard rails. Headquartered in Chicago, oak9 is a Built in 2022 Start-up to Watch backed by investors Menlo Ventures, HPA, Cisco Investments, and Morgan Stanley's Next Level Fund. oak9 partners with HashiCorp, AWS, and Microsoft, and actively supports the Cloud Security Alliance (CSA) and Open Web Application Security Project (OWASP).
Keep in touch with oak9 on LinkedIn, Twitter, Youtube, and TikTok, or visit oak9.io.
Media Contact
Matt McLoughlin, oak9, 610-228-2123, [email protected]
SOURCE oak9
Share this article