Docker containers perform the discovery of all of the accounts that an organization has within a given cloud provider and audits what’s going on in those accounts to build a model, Bird said. The data model then allows Sonrai’s service to understand what data is potentially sensitive and how data is being accessed. By using Docker containers within an organization’s own cloud accounts, he said that all customer data stays within the customer’s account and never needs to leave and come to the Sonrai service.
From a remediation perspective for items that Sonrai identifies as being potentially risky or out of compliance, Bird said that Sonrai provides directed best practices for organizations. Looking forward, he said Sonrai is looking at enabling more automated approaches for remediation. Bird explained that the entire Sonrai platform is built on top of a single API that is exposed to end users, so they have access to the full power of the platform for integration. He said organizations can directly hook into Sonrai’s product to make sure that compliance and security requirements are being met.
“We want to be able to connect to any place where our customers will be putting their data,” Hannigan said.