Act

דרופ ראשון מהקולקציה שלי ושל Act, מתרגשים לאירוע ב-3.11? כי אנחנו כן

Cloud security just got a whole new category - Meet CSIE 🏛️ Software Analyst Cyber Research just published 'The CISO’s Guide to Cloud Security Intent Enforcement', and it defines CSIE as a distinct new layer of cloud security. We’re proud that Act is profiled in it, and that this is the shift we’ve been leading from the start 💜 This is the problem it names: cloud teams can already see their risk, and they know exactly what they don’t want to allow. The hard part is removing it safely and keeping it from coming back. Visibility is solved. The next step is turning it into action: controls safely enforced in the infrastructure layer itself. SACR frames CSIE as a continuous control loop, because cloud environments never stop changing: Understand → Translate → Predict → Enforce safely → Govern and maintain. Key takeaways from the report: ⏩ Fixing a risk after it appears is not enough. The control has to both eliminate existing risk and stop it from coming back. ⏩ Proving a change is safe to enforce is what teams really need in order to act. And that proof has to come from how your specific environment actually runs, not from generic assumptions. ⏩ AI agents raise the stakes. Instructions inside an agent are not a cloud control. The environment itself has to enforce the boundaries. Thank you, Paul Webber, Jamie Feder, and the whole SACR team. Naming a category is hard work, and it gives every CISO a way to ask for it. Dive into the report to learn exactly what CSIE means, and read Act’s profile to see our capabilities in depth: https://lnkd.in/gGZ2hM6T

So excited to see Act Security on the big screen in NYC, celebrating our inclusion in the Fortune Cyber 60 ✨ It’s meaningful to see the shift from findings to action-centric enforcement earn real industry recognition. In the AI era, this foundation is critical - providing the guardrails teams need not only to defend against fast-moving, AI-driven attacks, but to adopt AI safely and confidently across their own organization. Want to see how we Act? Check us out: act.security

Congrats to Act and Astelia for making the 2026-2027 Fortune Cyber60, presented by Lightspeed and Amazon Web Services (AWS) ⭐️⭐️⭐️⭐️⭐️ Two young companies, already on one of cyber's most-watched lists. We're proud to partner on your journey, and even more excited for what comes next! #SuccessbyDesign

Congratulations to these SVCI portfolio companies on making this year’s Fortune #Cyber60, presented by Lightspeed and AWS Startups: 🔹Act 🔹Descope 🔹Drata 🔹Endor Labs 🔹Island 🔹Noma 🔹Scanner 🔹Tines At SVCI, we back founders early as they set to tackle some of cybersecurity’s toughest problems. One of the best parts of that work is watching their ideas become products that security teams rely on every day. Behind each company on this list are founders and teams putting in the work and building with purpose. Congratulations to all eight teams and everyone named to this year’s Cyber60. A well-deserved moment to celebrate what you’ve built. #Cybersecurity #CISO #VentureCapital #Startups #SVCI

Congrats to our 7 companies on the 2026-27 Fortune Cyber 60 🎉 Act, Bold Security, Neo, Doppel, Onyx Security, Torq, and Upwind Security We at Bessemer Venture Partners are honored to be on the journey with you. #Cyber60 https://lnkd.in/dK5ZGJ4q

Congratulations to Act, Descope, Drata & Torq for being named to the Fortune #Cyber60, presented by Lightspeed & Amazon Web Services (AWS) Startups. The Cyber 60 list recognizes the companies defining where cybersecurity goes next, check out the full list: https://lnkd.in/ejWAtPnK

𝗪𝗲’𝗿𝗲 𝘁𝗵𝗿𝗶𝗹𝗹𝗲𝗱 𝘁𝗼 𝗹𝗮𝘂𝗻𝗰𝗵 ��𝘂𝗿 𝗻𝗲𝘄 𝗿𝗲𝗽𝗼𝗿𝘁, 𝗧𝗵𝗲 𝗖𝗜𝗦𝗢’𝘀 𝗚𝘂𝗶𝗱𝗲 𝘁𝗼 𝗖𝗹𝗼𝘂𝗱 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗜𝗻𝘁𝗲𝗻𝘁 𝗘𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁: 𝗙𝗿𝗼𝗺 𝗖𝗹𝗼𝘂𝗱 𝗙𝗶𝗻𝗱𝗶𝗻𝗴𝘀 𝘁𝗼 𝗣𝗿𝗼𝗮𝗰𝘁𝗶𝘃𝗲 𝗖𝗼𝗻𝘁𝗿𝗼𝗹. In this new research, our research associate, Jamie Feder looks at why visibility is no longer the hard part of cloud security. Cloud teams can already see their risk, and they often know which cloud states they never want to allow. The harder part is preventing those states from returning. One more API call, console change or pipeline run can recreate the same problem, and the fix can’t break production. This challenge is at the heart of our 𝗖𝗹𝗼𝘂𝗱 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗜𝗻𝘁𝗲𝗻𝘁 𝗘𝗻𝗳𝗼𝗿𝗰𝗲𝗺𝗲𝗻𝘁 (𝗖𝗦𝗜𝗘) 𝗳𝗿𝗮𝗺𝗲𝘄𝗼𝗿𝗸, which translates security intent into reviewable, cloud-native controls, validating their impact before activation, and continuously preserving the intended security state. Here are our key takeaways from the report: → Google Cloud’s H1 2026 Threat Horizons report calls for stronger identity controls and automated posture enforcement as cloud threats speed up. → Cloud Security Intent Enforcement (CSIE) is not CNAPP 2.0. It is a control layer that works alongside CNAPP and turns cloud context and security intent into enforceable controls. → Fixing an unsafe state after it shows up is not enough. CSIE has to prevent that state at an authoritative enforcement point. → Production safety sets vendors apart. Simulation, audit modes, staged rollout and rollback decide whether teams can trust a control. → AI agents raise the stakes. Instructions inside an agent are not a cloud control. The environment itself has to enforce the boundaries. We profile four specialist approaches: ⟡ Act, which maps configured, effective and observed access, then tightens identity and network boundaries through guided campaigns, simulation and audit mode ⟡ Native, which translates declared security requirements into provider native controls across AWS, Azure, Google Cloud and OCI. One customer estimated time savings of more than 50% on a “no new static credentials” use case across three clouds ⟡ Aryon Security, which enforces policy at the cloud control layer across console, CLI, infrastructure as code and automation. One customer estimated its team would have built about 5 policies without Aryon, compared with about 80 using the platform ⟡ Wiz, which extends its Security Graph into preventive guardrails and impact-aware remediation through Green Agent. It examines an access token’s historical usage before deletion, to assess whether legitimate application activity depends on it. We also examine how other incumbents are moving into the space. For example, Orca Security, already owns much of the cloud context that CSIE depends on. Explore the full report here: https://lnkd.in/g3CcyZs6 #CloudSecurity #CNAPP