Deployment Firewall
A new way to enforce application security policies at the point of deployment, across staging & production environments
The OpsMx Deployment Firewall adds a gating mechanism to your existing CI/CD tools to guarantee compliance and prevent release of security vulnerabilities. Out of compliance release are automatically blocked before they get deployed
OpsMx is
Trusted By
What is a Deployment Firewall?
The OpsMx Deployment Firewall is a new way to secure your application releases and enforce software supply chain security. Just like a network firewall enforces rules and policies that keep bad actors out of your network, a deployment firewall enforces your application security and DevSecOps policies to keep bad or insecure code from getting into production.
The deployment firewall works with leading CI/CD platforms, such as Jenkins, Argo, Spinnaker, GitLab and GitHub Actions. You specify the rules you want enforced for deployments, such as mandatory code scanning, no critical CVEs, approved change request ticket, or security review. The deployment firewall then runs in the background to automatically verify at the time of deployment that policies have been followed. The deployment of application releases that are out of compliance is blocked.
Key Capabilities
Deployment Security Enforcement
- Security policy checks for software deployments
- Policy enforcement engine to orchestrate and execute real-time policy checks before deployment
Policy Driven Automated Compliance
- Automate guard rails block release of insecure or out of compliance code
- Pre-packaged Deployment Policies / Security & Compliance Rules
- Support for regulatory compliances – to FedRamp, PCI, HIPAA, etc.
Automated Verification & Actionable Intelligence
- Automated risk scoring of releases analyzing data from security scan ecosystem
- Analyze open or broken firewall rules
- Automated data-driven decisions
Automated Approvals and Notifications
- Automated deployments / roll back based on deployment rules results
- Automate policy gates to ensure velocity
- Manage exceptions
- Notify and collaborate using existing channels (email, messaging, chat)
Automated Compliance and Audit
- Automated deployment security posture management against security data
- Deployment audit and attestation
- Compliance reports and dashboard
DevOps and Security Tool Integrations
Secure Continuous Delivery Datasheet
Read about secure, automated, and scalable CD solution to reduce risk exposure and bring greater resilience and integrity to your applications
Top Reasons to Consider Deployment Security
Learn how radical changes in the delivery processes introduce new security risks and increase the attack surface.
Tackle the Threat of Software Supply Chain Attacks
Find the comprehensive solution to tackle real-time vulnerability risks and security breaches in your delivery process.
Get started with
OpsMx Delivery Shield
Companies of all sizes, from technology startups to Fortune 500 trust OpsMx
Ready for a Live Demo?
See OpsMx Delivery Shield in action!
Talk to one of our AppSec experts and get insights on:
Reducing security costs by using ASPM to consolidate toolsets.
Expanding application security visibility across the SDLC
Reducing the burden that "Shift Left" can put on developers
Prioritizing and managing the flood of vulnerabilities
Automating policy compliance and reporting.
Manage security risks of open source components
Frequently asked questions
How does the Deployment Firewall differ from traditional network firewalls?
OpsMx’s Deployment Firewall enforces Application Security and DevSecOps policies to keep bad or insecure code from getting into production. It performs security checks during deployment, and blocks insecure deployments if any compliance breach is detected. For ex: if code scanning fails, or critical CVEs detected in code, lack of security review, etc., or based on any rule defined by you.
How does the Deployment Firewall enforce security policies during software deployment?
OpsMx’s Deployment Firewall makes use of a Policy enforcement engine to orchestrate and execute real-time policy checks before deployment. With the help of automated guardrails, insecure or out of compliance code deployments are blocked.
Can OpsMx Deployment Firewall help in automating compliance with standards like FedRAMP, NIST, and CIS Benchmark Kubernetes?
Yes, OpsMx has built-in support for compliance with various industry regulations. This is essential for organizations to establish effective governance, risk management, and compliance (GRC) programs to ensure they operate within the legal and regulatory boundaries applicable to their industry.
OpsMx supports the following compliance frameworks natively:
- NIST 800-53
- FedRAMP
- OpenSSF ScoreCard
- OWASP Top 10 CI CD Security Risks
- NSA CISA Top 10
- MITRE-ATT&CK
- CIS Benchmark Kubernetes
How does OpsMx Delivery Shield integrate with existing security scan tools for automated risk analysis?
OpsMx Delivery Shield integrates seamlessly with existing security scanning tools and ingests scan data from various SAST, DAST, and SCA tools. It automates risk analysis by consolidating security findings, correlating them with deployment stages, and providing actionable insights via dashboards. This enables continuous monitoring and real-time risk assessment across the CI/CD pipeline.
Can OpsMx Deployment Firewall be customized to enforce organization-specific security policies?
Yes, OpsMx Deployment Firewall can enforce custom organization-specific security policies. It uses a Policy enforcement engine based on OPA, and your custom security policies can be hard-coded in Policy-as-Code (PaC) format.
How does OpsMx support DevSecOps practices through its deployment firewall?
OpsMx supports DevSecOps practices by enforcing security policies before every deployment through its deployment firewall. It integrates with various security tools to identify vulnerabilities and automatically block deployments that don’t meet security standards. The deployment firewall uses policy-based controls and continuous monitoring to ensure only secure and compliant code is deployed.
KEEP UP TO DATE WITH OPSMX
Be the first to hear about the latest product releases, collaborations and online exclusive.