Check Point Software Technologies has announced the acquisition of Protego, an Israeli startup that develops security for serverless cloud computing. Omdia sees this move as further evidence of a landgrab by security industry heavyweights to establish their presence in the emerging market for technology to protect infrastructure- and platform-as-a-service (IaaS and PaaS) environments.
The serverless paradigm is the next phase of microservices beyond containers, with application code broken down into individual “functions” that are created and invoked on demand, and in turn expunged once they have served their purpose. Serverless technology is at an early stage of development, but some cloud service providers are already offering function-as-a-service capabilities, such as AWS Lambda, and the security industry is already taking the first steps to secure these environments.
This is the second acquisition of a serverless security vendor this year, with Palo Alto Networks having bought PureSec in May. That Protego has now been snapped up by Palo Alto Networks' archrival Check Point is indicative of how the competitive landscape for cloud security is evolving. This is also Check Point’s second acquisition in this area of the market (it bought cloud security posture management vendor Dome9 in October 2018).
One could argue that this is a “copycat” move following the PAN/PureSec deal, and indeed it is, but acquisition was the best way for Check Point to keep up in this fast-moving market. In fact, speed is very much the point. The key challenge of providing security for serverless technology involves integration into the development pipeline, because runtime security is all but impossible for code that might run for only milliseconds then disappear. Having Protego will enable Check Point to accelerate its efforts to provide this for its customers.
The Protego technology will become part of Check Point’s CloudGuard portfolio, and will also be integrated into its overall Infinity architecture for threat prevention across network, endpoint, and cloud.
Palo Alto Networks is redefining what it means to be a cybersecurity platform vendor, INT005-000018 (July 2019)
“Aqua expands into cloud posture management with CloudSploit acquisition” INT005-000057 (November 2019)
“Palo Alto further expands its cloud security play with acquisition of microsegmentation vendor Aporeto” INT005-000062 (November 2019)
“Trend Micro adds cloud security and compliance checking with Cloud Conformity buy” INT005-000043 (October 2019)
Rik Turner, Principal Analyst, Infrastructure Solutions