Zscaler, Inc.

Shoham Danino

Aharon Fridman

Nir Barel

Systems and methods for providing efficient remediations for cloud environment vulnerabilities. The present systems and methods are configured to calculate the most efficient remediations to reduce cloud environments' risks, calculate a cloud environment's biggest risks and weaknesses, and provide a holistic overview of a cloud environment across different service providers. In an embodiment, steps include scanning a cloud environment for posture control data; identifying a plurality of security risk events based on the scanning; calculating a risk score for each of the plurality of security risk events; and determining and recommending one or more remediations based on the risk score of each of the plurality of security risk events and how efficient each remediation is.

Systems and methods for providing efficient remediations for cloud environment vulnerabilities

Systems and methods for detailed cloud posture remediation recommendations utilizing custom Large Language Models (LLMs). The present systems and methods are configured to perform the steps of scanning a cloud environment for posture control data; generating one or more alerts related to any of risky configurations and risky activities associated with the cloud environment; generating one or more remediation recommendations based on the one or more alerts; and providing the one or more alerts and the one or more remediation recommendations to administrators of the cloud environment.

Systems and methods for detailed cloud posture remediation recommendations utilizing custom large language models (LLMs)

Systems and methods for providing an identity power scoring system for cloud environments. Various embodiments include collecting entitlement information associated with a user of a cloud environment; deriving a global power score of the identity, the global power score being based on the identity's entitlements in the cloud environment; and providing the global power score to security administrators of the cloud environment by way of a Graphical User Interface (GUI).

Entitlement-based identity power scoring system for cloud environments

Systems and methods for access key abuse detection, the systems and methods including steps of receiving activity data relating to an access key from cloud providers associated with a cloud-based system, generating a baseline for the access key based on the activity data, monitoring activities associated with the access key in the cloud-based system, and calculating a score for monitored activities based on a comparison of the monitored activities to the baseline. The present scoring system helps identify an abnormal and risky activity that indicates an attacker is abusing the access key. In addition, a baseline is created for a plurality of selected attributes that present the normal access key usage in order to identify malicious abnormal activities.

Growing community of inventors

Tel Aviv, Israel

Shoham Danino