What’s New in Falcon Cloud Security: Expanding Multi-Cloud Coverage

Identities, permissions, exposed resources, and sensitive data can all contribute to risk regardless of whether they reside in AWS, Microsoft Azure, or Google Cloud. However, security teams often encounter uneven visibility and coverage across disparate cloud environments, and face difficulty in consistently understanding risk across a multi-cloud estate.

This month’s CrowdStrike Falcon® Cloud Security innovations expand its capabilities in real-time cloud security posture management (CSPM), the Cloud Risks feature, data security posture management (DSPM), and cloud infrastructure entitlement management (CIEM) across Azure and Google Cloud. With these expansions, key security workflows are now available across AWS, Azure, and Google Cloud.

Real-Time CSPM for Google Cloud

Security teams rely on CSPM to identify misconfigurations and internet exposures before they can be exploited. However, traditional CSPM approaches often rely on periodic snapshot scanning, which creates a delay between when a risk is introduced and when it becomes visible to defenders. During this window, newly created resources, permission changes, and misconfigurations may go unnoticed.

CrowdStrike introduced real-time CSPM for AWS and Azure to enable security teams to identify cloud changes and misconfigurations within minutes. We’re now extending those capabilities to Google Cloud.

Across Google Cloud environments, Falcon Cloud Security provides near real-time visibility into new assets, asset updates, misconfigurations, and cloud risks that emerge from combinations of cloud exposures. This helps teams identify potential breach paths shortly after they are introduced. 

By surfacing findings as they happen, security teams can investigate and remediate cloud risks sooner using a consistent workflow across AWS, Azure, and Google Cloud.