8000+
Certified Learners
15+
Years Avg. faculty experience
40+
Happy Clients
4.5/5.0
Average class rating
Introduction of Datadog SIEM
Datadog, the monitoring and security platform for cloud applications
launched Cloud Security Platform in 2021, adding full-stack security context to Datadog’s deep
observability capabilities. This new offering enables organizations to use a single platform to
correlate security insights with monitoring data across infrastructure, network and application
tiers, providing Security teams with the visibility they need to understand and respond to
potential threats faster.
Datadog’s Cloud Security Platform delivers real-time threat detection and continuous
configuration audits across your entire production environment, so you can bring speed and scale
to your security organization. The Cloud Security Platform is built on top of Datadog’s
observability platform, which breaks down silos between Security and DevOps teams and aligns
them to shared organizational goals.
Datadog’s Cloud Security Platform addresses these challenges by enabling DevOps and Security teams to access a shared source of truth supported by a common data model. With Datadog,
- in parallel to detecting potential threats,
- Security leaders now have access to the underlying infrastructure,
- network and application data at the time of an attack,
- meaning they have deeper insights that enable more accurate threat detection and accelerated incident response.
- And, Datadog’s platform approach ensures that this data is automatically correlated and presented in context, without requiring manual analysis.
The Datadog Cloud Security Platform includes:
- Cloud Security Posture Management (CSPM) makes it easy to track whether your production environment complies with industry standards, such as PCI DSS, SOC 2 and HIPAA, and catches misconfigurations that leave your organization vulnerable to potential attacks.
- Cloud Workload Security (CWS) detects threats to your production workloads by monitoring file and process activity across your environments to help catch host and infrastructure-based attacks.
- Security Monitoring identifies threats to your cloud environments by analyzing operational and security logs. As an easy-to-use cloud-native SIEM, Security Monitoring provides out-of-the-box security integrations and threat detection rules that are easy to extend and customize.
- Application Security, currently in beta, provides protection against application-level threats by identifying and blocking attacks that target code-level vulnerabilities, such as SQL injections and cross-site scripting (XSS) exploits.
- Unified Observability and Security Reporting allows seamless pivots between DevOps telemetry and security insights. This unified experience enables Security teams to understand the operational and business impact of security incidents, and DevOps teams to see security signals alongside the metrics, traces and logs of their services.
