Developer stability platform Snyk has ordered Fugue, marking its fifth acquisition more than the past calendar year and a fifty percent.
The move, declared Thursday, marks Snyk’s entry into the cloud stability industry. By incorporating Fugue, a startup specializing in cloud infrastructure protection and compliance, Snyk strategies to permit developer-1st cloud stability posture administration (CSPM). It would be the “industry’s very first CSPM created by and for builders,” in accordance to Snyk’s announcement. Conditions of the acquisition ended up not disclosed.
Fugue, centered in Frederick, Md., was launched in 2013 and focuses on safety for the cloud progress lifecycle that includes infrastructure-as-code (IaC) abilities. Snyk reported the acquisition will aid the evolving function of developers by assisting them “safe their code prior to deployment, manage its protected integrity even though functioning, and greater have an understanding of the precise spots to supply fixes back in the code.”
Doug Cahill, vice president and group director of cybersecurity at Organization Strategy Group (ESG), a division of TechTarget, noted the two companies’ shared determination to open source communities.
Chris Steffen, study director at Company Administration Associates, said the acquisition will increase Snyk’s IaC abilities with the added benefits of Fugue’s cloud safety.
“Specified the significance of DevSecOps in the cloud, the integration of the two providers will supply supplemental safety decisions for developers as they create workloads for the cloud space,” Steffen explained to SearchSecurity.
Similarly, ESG senior analyst Melinda Marks claimed the expanding use of IaC has released further danger because builders are promptly using templates and scripts to provision infrastructure. If there is a code flaw or misconfiguration, she explained, it can expose consumer or firm facts if deployed in output.
“Fugue has been focused in this place, developing equipment for builders to assistance them use plan-as-code, automated screening and posture management to cut down misconfigurations,” she mentioned in an electronic mail to SearchSecurity. “Snyk has been addressing IaC security with a module as element of its alternative, but it truly is good to see them purchase Fugue so they can supply a much more comprehensive alternative to aid developers safely and securely use IaC.”
In Oct, Snyk acquired CloudSkiff, which also focuses on IaC as well as drift detection. Other the latest acquisitions by Snyk contain open source compliance and security device FossID last Could and AI vendor Manifold in January 2021. In 2020, Snyk obtained computer software examination startup DeepCode.