Snyk enters cloud security market with Fugue acquisition


Developer safety system Snyk has procured Fugue, marking its fifth acquisition more than the final calendar year and a half.

The move, declared Thursday, marks Snyk’s entry into the cloud protection market place. By introducing Fugue, a startup specializing in cloud infrastructure security and compliance, Snyk programs to empower developer-initial cloud protection posture management (CSPM). It would be the “industry’s initially CSPM developed by and for builders,” according to Snyk’s announcement. Phrases of the acquisition ended up not disclosed.

Fugue, primarily based in Frederick, Md., was established in 2013 and focuses on security for the cloud advancement lifecycle that consists of infrastructure-as-code (IaC) abilities. Snyk explained the acquisition will aid the evolving function of builders by serving to them “protected their code just before deployment, maintain its secure integrity when managing, and far better fully grasp the precise destinations to offer fixes back in the code.”

Doug Cahill, vice president and team director of cybersecurity at Business Method Team (ESG), a division of TechTarget, observed the two companies’ shared determination to open up resource communities.

Chris Steffen, research director at Company Administration Associates, reported the acquisition will increase Snyk’s IaC capabilities with the benefits of Fugue’s cloud security.

“Given the relevance of DevSecOps in the cloud, the integration of the two companies will offer more protection choices for builders as they produce workloads for the cloud place,” Steffen informed SearchSecurity.

Similarly, ESG senior analyst Melinda Marks said the escalating use of IaC has launched extra danger mainly because developers are promptly working with templates and scripts to provision infrastructure. If there is a code flaw or misconfiguration, she mentioned, it can expose customer or corporation knowledge if deployed in production.

“Fugue has been centered in this place, building instruments for developers to help them use plan-as-code, automated testing and posture administration to lessen misconfigurations,” she stated in an email to SearchSecurity. “Snyk has been addressing IaC security with a module as component of its solution, but it is really good to see them purchase Fugue so they can provide a additional finish solution to assist developers safely and securely use IaC.”

In Oct, Snyk acquired CloudSkiff, which also focuses on IaC as well as drift detection. Other current acquisitions by Snyk include open up source compliance and stability software FossID past Could and AI vendor Manifold in January 2021. In 2020, Snyk acquired software assessment startup DeepCode.