Oracle

Oracle announces availability of Cloud Guard and Maximum Security Zones

15 September 2020 | Abigail Opiah

Cover

Oracle has announced the availability of Oracle Cloud Guard and Oracle Maximum Security Zones.

The company said it is the first public cloud provider to activate security policy enforcement of best practices automatically, with Oracle Maximum Security Zones.

Oracle Cloud Guard monitors configurations and activities to identify threats and automatically acts to remediate them across all Oracle Cloud global regions.

The increase in cloud adoption has created new security ‘blind spots’ that have contributed to more than 200 breaches over the past two years.

Gartner forecasts that "through 2025, 99% of cloud security failures will be the customer's fault".

"Security has been a critical design consideration across Oracle Cloud for years,” said Clay Magouyrk, executive vice president, Oracle Cloud Infrastructure.

“We believe security should be foundational and built-in, and customers shouldn't be forced to make trade-offs between security and cost.

"With Oracle Cloud Guard and Oracle Maximum Security Zones' security automation and embedded expertise, customers can feel confident running their business-critical workloads on Oracle Cloud."

Oracle Cloud Guard acts as a log and events aggregator that directly integrates with all major Oracle Cloud Infrastructure services – Compute, Networking, Storage – and automatically implements unique components called targets, detectors, and responders.

Oracle Maximum Security Zones extends IaaS access management to restrict insecure actions or configurations using a new policy definition that applies to designated cloud compartments.

The company said that its new Oracle Cloud Infrastructure service helps ensure resources are secure from inception by enforcing security best practices for ‘highly sensitive’ workloads.

Oracle Maximum Security Zones includes policies for several core Oracle Cloud Infrastructure Services, including Object Storage, Networking, Encryption, DBaaS, and File Storage.

"As workloads transition to the cloud, organizations are looking for a supplier where security technology is designed-in throughout the complete hardware/software stack," said Jay Bretzmann, program director, IDC cybersecurity research.

"Oracle's new cloud security services will help automate and simplify the management of increasingly critical applications with painfully stringent security and compliance requirements that, until lately, few imagined would ever migrate off-premises."