Pulumi Expands Cloud Automation Platform with Two New Security Products

Pulumi Corp., an infrastructure-as-code company, today announced two security products that expand its platform to automate, secure, and manage cloud infrastructure everywhere.

The company's first new security product, Pulumi ESC — ESC stands for Environments, Secrets, and Configuration — was announced at the fourth annual PulumiUp conference, and it provides automated cloud security with centralized secrets management that appeals to engineers.

The service allows engineers to collect, secure, and tag secrets and version-related configurations using the “concept of environments.” ESC is designed to make security best practices, such as short-lived dynamic credentials, the default and integrates with other popular secret stores, including 1Password, Amazon Web Services Inc., Azure, Google Cloud, and HashiCorp Vault.

ESC provides a unified workflow and pane of glass for all secrets and works well for infrastructure automation, but can be used for any workload that requires configuration and secrets, including applications and Kubernetes workloads.

The second new release, Pulumi Insights, offers intelligent cloud management and a complete inventory of cloud assets, with search, analytics, and AI across the cloud. The service includes support for resources not provided by Pulumi IaC, such as AWS CloudFormation, Microsoft ARM, and HashiCorp Terraform, along with cloud controllers and SDKs.

With Pulumi Insights, users can visualize resource relationships using graphs and pivot tables that show explicit and automatically inferred dependencies. The service automatically detects security, compliance, and misconfiguration issues through automatic remediation and can also place resources under code control infrastructure. It is designed to be extensible, and features support for third-party integrations with Kubecost and Snyk currently in development.

The two new releases support Pulumi IaC, the company’s existing offering that provides cloud automation of applications and infrastructure as code in any programming language, including Python, Go, TypeScript, .NET, and Java. Pulumi IaC automates the entire cloud infrastructure lifecycle and the company claims it offers excellent time to market.

Pulumi is a venture capital-backed startup that has raised about $99 million to date, including a $41 million Series C round in October. The company’s investors include Madrona Venture Group, New Enterprise Associates Inc., Tola Capital, and Strike Capital.

Photo: Paulomi