LLM-based assistive experience easily communicates critical alert context making security and engineering teams more effective at adopting new cloud technologies.
Lacework, a data-driven cloud security company, has announced a Generative Artificial Intelligence (AI) assistant that gives enterprise customers a new way to engage with the Lacework platform by providing customised context to investigate and remediate proactive and reactive alerts.
This capability extends the impact of existing security teams: it enables them to build stronger relationships with DevOps organisations while improving their own hiring and retention outcomes.
Introducing Lacework AI Assist
Lacework AI Assist meets analysts at their level of expertise and helps them navigate security issues in complex cloud environments with ease.
It not only saves security teams time when investigating threats, but also significantly enhances cloud security operations centers’ (SOC) efficiency by providing them with personalised guidance for resolution.
Leveraging the power of Generative AI, Lacework’s assistive experience simplifies the understanding and actioning of compliance alerts for teams, fostering a culture of proactive risk management. Moreover, these capabilities allow SOC and security experts to build credibility with developers as it guides them through building up technical context to streamline the development process in the cloud.
“The Lacework assistive experience will give our cloud security engineers greater insight into alerts that will help our team with threat investigations, remediations and operational efficiency,” said Colin Barr, Senior Engineering Manager, Application Security at Paddle.
“Knowing that Lacework built their assistive technology with a private by design architecture – for both data ingestion and for training the model – is also extremely important to us.”
The Lacework assistive experience provides customers with the capability to ask questions such as:
- Why should I look at this alert?
- What Lacework tools can I use to further investigate this?
- How do I fix this misconfiguration using the AWS CLI?
- Does this violation affect my SOC2 compliance?
Trending Generative AI tools are only as effective as the data they can manipulate and Lacework is architectured to handle the immense volume, velocity, and variety of cloud data in order to detect known and unknown threats.
Combining the insights generated from Lacework Polygraph Machine Learning with the assistive technology from LLM’s offers customers a unique advantage to get better outcomes, faster.
A continued commitment to Private by Design solutions was a critical priority when developing the Lacework assistive experience. Lacework has taken extensive measures to ensure that customer data stays secure, which means that customer data is not used to train any models.
Leveraging Amazon Bedrock
Lacework now leverages the Generative AI model services from Amazon Bedrock, a fully managed service from Amazon Web Services (AWS) that makes foundational models from leading AI companies – as well as Amazon – available via API. This integration deepens the relationship and builds on the technical collaboration between Lacework and AWS, and allows Lacework to experiment with different models to create the best customer experiences.
“Generative AI was a natural progression for us to build on the deep Machine Learning capabilities that are at the core of the Lacework platform’s anomaly detection,” said Adam Leftik, Vice President, Product, Lacework. “Our customers can use Lacework to secure themselves against potential Generative AI threats, as well as use Generative AI assistance to better understand the risks and threats in their cloud environments. Utilising Amazon Bedrock to do just that is an exciting technical win.”
Click below to share this article
