AppViewX
Delivering Low-Code Automation for NetOps

AppViewX Named a Sample Vendor in the Gartner Hype Cycle for Digital Identity, 2023

Thursday, August 10, 2023

Provider of machine identity management enables crypto-agility through automated discovery, inventory, provisioning and renewals/revocation of digital certificates

AppViewX, a leader in automated machine identity management (MIM) and application infrastructure security, announced it has been named a Sample Vendor by Gartner in the Hype Cycle for Digital Identity, 2023. As stated in the research: “Organizations struggle to protect machine credentials such as secrets and certificates properly, leading to their leakage and abuse.”

According to the Gartner, Inc. report: “Organizations have and use many machine identities. However, these identities are rarely managed properly, exposing them to risk. Proper machine identity management allows organizations to secure communications between workloads and/or devices, enabling current and new digital use cases. Machine identity management is critical to secure DevOps workflows by automating security through management of credentials used within the tool chain, and for machine-to-machine communication.”

“Discovering, maintaining visibility into, and controlling machine identities across devices, clouds, applications, microservices, containers, IoT, etc. has become manually impossible,” said Gregory Webb, CEO of AppViewX. “AppViewX’s best-in-class ability to automate machine identity management eliminates cyber risk and outages by renewing and revoking certificates on time, while enabling Zero Trust security.”

AppViewX has been recognized by Gartner® in the Hype Cycle™ for Digital Identity, 2023 as a notable vendor in the field of machine identity management. This recognition stems from their innovative approach to enabling crypto-agility through automated processes such as discovery, inventory management, provisioning, and renewal/revocation of digital certificates.

AppViewX offers a comprehensive solution for automated digital certificate lifecycle management (CLM) and public key infrastructure (PKI) services. These services are delivered through a cloud-based platform, providing organizations with the means to modernize their cloud, hybrid, and DevOps infrastructures. The tools provided by AppViewX, namely CERT+ and PKI+, offer immediate benefits by effectively identifying certificates within complex hybrid multi-cloud environments. Additionally, these tools assist in creating and maintaining inventories, provisioning both private and public trust certificates from various certification authorities, issuing alerts for expiring certificates, and automating the renewal and revocation processes. This automation serves to eliminate potential outages and security vulnerabilities across a wide range of applications, services, devices, and security infrastructure.

Reference:

Gartner, Inc. "Hype Cycle for Digital Identity 2023," 26 July 2023, Ant Allan, Nathan Harris.

Please note that "GARTNER" and "HYPE CYCLE" are registered trademarks of Gartner, Inc. This information has been provided with permission from Gartner, and it's important to highlight that Gartner does not endorse specific vendors, products, or services mentioned in its research publications. The opinions expressed in Gartner's research publications reflect the views of their research organization and should not be interpreted as factual statements. Gartner disclaims any warranties, whether expressed or implied, regarding the accuracy or suitability of this research for any particular purpose.

AppViewX Collaborates with NIST on Addressing Visibility Challenges with TLS 1.3 Project

Monday, August 21, 2023

The organizations that make up the project consortium join forces to help enterprises increase network visibility and adopt TLS 1.3 and other modern Internet security protocols

AppViewX, the leader in automated machine identity management (MIM) and application infrastructure security, today announced that the company has entered into a Cooperative Research and Development Agreement (CRADA) with the National Cybersecurity Center of Excellence, part of the National Institute of Standards and Technology (NIST), to help organizations address visibility and implementation challenges associated with the TLS 1.3 Project.

The NIST initial guide for comprehending suitable key management solutions for attaining visibility in TLS 1.3 is accessible without any cost at this location.

This endeavor extends the groundwork laid by the NCCoE's prior initiative titled "TLS Server Certificate Management," which provided guidance to entities on the centralized oversight and control of their TLS certificates. This recently undertaken project aims to equip security and IT experts with the necessary resources for enhancing insight into data transmissions on their servers. Moreover, it supports the seamless implementation of TLS 1.3 within their exclusive data facilities and hybrid cloud setups.

"AppViewX is committed to a standards-based approach for all certificate, key and automation use cases whenever possible. For example, we have partnered with Netscout to develop a prototype for the TLS 1.3 visibility challenge that we plan to formalize as an open industry standard," said Murali Palamisamy, Chief Solutions Officer at AppViewX. "We are pleased to be working with NIST on the TLS 1.3 Project, which dovetails with our Secure Key Orchestration initiative that aims to secure and automate the management of all the encryption keys across distributed and hybrid enterprise environments."

TLS certificates, a critical component of secure communication between clients and servers, ensure data encryption for all transactions. Although the recommendation to upgrade to the latest iteration, namely TLS 1.3, for enhanced security is widespread, organizations are encountering challenges when attempting to implement network visibility strategies due to the presence of forward secrecy mechanisms. This collaborative initiative seeks to effectively tackle the security implications and visibility obstacles arising from the modifications in the TLS 1.3 protocol.

Prominent enterprises spanning the Fortune rankings within sectors like financial services, banking, healthcare, oil and gas, manufacturing, and high tech rely on the AppViewX Cloud-native Identity and Security Platform. This platform serves to mitigate cybersecurity risks and ensure adherence to security compliance standards. Within this framework, the AppViewX CERT+ solution takes charge of certificate lifecycle management (CLM), streamlining tasks such as certificate discovery, monitoring, analysis, provisioning, and orchestration. This encompasses a range of digital certificates including SSL/TLS, client, and code signing certificates. The overall goal is to avert cloud service disruptions and preempt damaging security breaches. The versatility of AppViewX CERT+, available for on-premises deployment, cloud integration, or as a service, ensures accessibility and scalability, effectively aligning with diverse identity governance and cybersecurity strategies within various organizations.

AppViewX Named Best DevOps Security Tool Finalist By Computing Magazine

Monday, January 22, 2024

AppViewX KUBE+ recognized for Kubernetes Certificate Lifecycle Management in DevOps Excellence Awards 2024

NEW YORK – AppViewX, the leader in automated machine identity management (MIM) and application security, today announced that AppViewX KUBE+, which simplifies and modernizes certificate lifecycle management for Kubernetes environments, has been shortlisted for Best Devops Security Tool in Computing Magazine’s DevOps Excellence Awards 2024.

Computing’s DevOps Excellence Awards showcase outstanding achievements from organizations, personalities and solutions that have successfully applied DevOps methodologies. Winners will be announced at a live awards ceremony on Thursday, March 14 in London.

Container-orchestration platform Kubernetes has become an integral part of modern application development and delivery. Whether standing up a cluster or securing the critical interactions with and within a cluster, PKI and TLS certificates are foundational to Kubernetes and all internet security. AppViewX KUBE+ provides a central solution to discover, manage, automate, control and govern certificates across containerized workloads and Kubernetes infrastructure. Through holistic visibility, end-to-end automation, and policy control, AppViewX KUBE+ secures containerized workloads at scale while keeping speed and agility intact.

“With the wide scale adoption of containerization, the average enterprise has thousands of short-lived certificates across hundreds of Kubernetes clusters to manage,” said Gregory Webb, CEO of AppViewX. “This volume of certificates coupled with manual processes and siloed DevOps, SecOps and IT Ops teams adds to the challenges of securing Kubernetes. AppViewX KUBE+ enables cross-functional teams to automate and manage short-lived certificates at scale and speed to ensure security in complex cloud-native environments.”

As a multi-cloud SaaS solution, AppViewX KUBE+ is part of the AppViewX Digital Identity Platform that integrates with public and private CAs, Kubernetes environments, DevOps tools and ITSM products. It supports all major Kubernetes platforms and services including hybrid/on-premises (Openshift, Tanzu, Rancher) and cloud provider solutions like Amazon Elastic Kubernetes Service (Amazon EKS), Azure Kubernetes Service (AKS), and Google Kubernetes Engine (GKE) as well as service mesh products like Istio and Linkerd.

AppViewX Named “Must See” Vendor at RSA Conference 2024 by Analyst Firm EMA

Tuesday, May 07, 2024

NEW YORK --AppViewX, the leader in automated machine identity management (MIM) and application security, today announced it was selected by analyst firm EMA (Enterprise Management Associates) for its Vendor Vision 2024 Report. In the report, AppViewX is named one of the 12 vendors that attendees “must see” while attending the RSA Conference next week in San Francisco. AppViewX will demonstrate its innovative SaaS platform and certificate lifecycle management solutions at Booth 4508 in the Moscone North Expo hall.

According to EMA analysts:

“The AppViewX Platform heralds a ground-breaking era in identity management, addressing the intricate network of human and machine entities that demand secure access. Leveraging AI and ML, this platform streamlines identity provisioning and lifecycle management across diverse environments, from on-premises to multi-cloud setups. EMA’s assessment under-scores its role in fortifying cybersecurity postures, enforcing compliance controls, and mitigating risks that expired or rogue digital certificates pose. By centralizing management and automating cryptographic policy enforcement, AppViewX empowers organizations to uphold zero trust principles and bolster resilience against evolving threats.”

“Being named a Visionary Vendor at the RSA Conference by EMA as one of the best products they have seen is one of the most coveted forms of recognition in the industry,” said Gregory Webb, CEO of AppViewX. “Our ability to automate enterprise-wide certificate-based identity provisioning, lifecycle management, and cryptographic policy creation and enforcement in one integrated SaaS platform is unmatched.”

EMA analysts Christopher Steffen, VP of Research and Ken Buckler, Research Director also stated in the report:

“AppViewX stands out with its SaaS-first approach, offering customers a robust SaaS solution mirroring its on-premises version with added features. The rapid updates ensure customers swiftly realize value from the AppViewX Platform. Additionally, AppViewX provides a diverse set of automation workflows, easily customizable through a visual builder. The platform simplifies certificate provisioning by automating the entire process, from issuance to binding, eliminating manual errors and reducing operational overhead.”