The challenge with microservice architectures is that the environment and the applications are dynamic and virtualized. Traditional security approaches such as agents and firewalls don’t insert cleanly. Securing the edges (e.g. with WAF) and the infrastructure (e.g. with CNAPP) provide some protection, but dynamic application logic and the constant flow of sensitive data through the service layer must be observed and protected too.

LeakSignal’s novel approach monitors and protects the service layer by inserting into the data plane - the new networking layer for microservices. With this lightweight approach, security teams achieve visibility to risks, assessment of their severity, and mitigation of malicious traffic.

KEY BENEFITS

INSTALLS IN MINUTES

Installs as a lightweight WebAsembly module into existing ingress, sidecar, and ambient mesh proxies, giving engineering and security teams instant visibility to assess the data plane security posture.

AGENTLESS

LeakSignal’s Inline Response Manager (IRM) is built to process all outbound content, which allows for unique data protection and audit capabilities that identify exactly what sensitive data was accessed.

INSTANT OUTCOMES

Automatically maps all services and sensitive data in real-time. After analysis, improved posture management is achieved through prioritization, microsegmentation and configuration hardening.