Products
Trust your code with Desired State Enforcement.
Sanction your guardrails and stabilize your code
Pre-define the trusted path to production from repository to release to reduce your risk.
By smart-gating the pipelines to production and continuously monitoring your runtime environment for changes, enforce a desired state of your applications and infrastructure before, during and after release.
Use Cases
Prevent risk
Certify that all your code is in a desired state and meets security standards and compliance requirements.
Prevent drift
Prevent unsanctioned changes from entering into your runtime environment without being scanned or tested in your CI/CD pipeline.
Prevent delays
Give maximum autonomy to developers while providing unprecedented control for security teams, reducing friction across your org.
How it works
Instrumentor
Unison Core
Instrumentor
Unison Core
Instrumentor
Unison Core
- Risk – does it have a validated vulnerability above a certain CVSS score?
- Provenance – did it come from a trusted pipeline and/or repository
Unison then correlates instrumented runtime data from production with the allow-list created in CI/Stage and ensures that all files running in production have passed through the smart gates and were thereby approved for promotion.
Unison is constantly running, which means it updates the register of approved files and packages with every promotion. If a file or package is detected in production that was not scanned and approved for promotion, a notification is sent to the application owners.
- SaaS by-default (ISO 27001 Certified).
Features
Automate Security Review
Define simple and transparent risk-posture thresholds across all your pipelines and scanners based on Rezilion’s ability to validate actual risk.
Enable DevOps Autonomy
Help DevOps to release code with acceptable risk posture by showing them exactly what they need to fix in order to meet your defined standards.
Establish a root of trust
Ensure only code from trusted sources is running in production by certifying the repositories and processes responsible for promoting them into runtime.
Achieve continuous assurance
Scan once during pre-deployment, assure continuously in runtime. Guarantee that 100% of the code being executed in production meets your standards 100% of the time.
Detect drift, threats, and bad actors instantly
Get notified, immediately, when unsanctioned changes are introduced in production to quickly evaluate their context and triage for remediation, if necessary.
Take the right action at the right time
In the event of a compromise, have detailed knowledge into the origin, nature and location of the threat to interrupt attacker persistence.
Maintain release velocity with Automated Vulnerability Validation
Get Started Now
Reduce your patching by 70% or more in less than 10 minutes.
Let us show you how.