Launch of cloud protection service “Cloud Patrol” including Microsoft Azure

SB Technology Corp. (Headquarters: Shinjuku-ku, Tokyo; President ＆ CEO: Shinichi Ata; hereinafter referred to as SBT) has been involved in incidents in cloud environments such as Microsoft Azure *1, including configuration deficiencies and incidents that lead to unauthorized access and information leaks. Cloud Patrol (hereinafter referred to as this service), a cloud protection service that detects and provides notifications, will be launched on August 21, 2023.

This service monitors and notifies you of incorrect settings that could lead to an incident or alerts that indicate an incident. Monitoring automatically performs regular patrols every 60 minutes *3, and notifies you whenever a new risk is detected. By extracting and notifying only alerts that require a quick response, it is possible to detect risks early without being buried among low-priority alerts. Furthermore, if high-risk settings such as unintentional port openings are detected, settings can be automatically changed.
This service requires no initial cost and is available for a monthly fee of 50,000 yen for up to 1,000 protected assets *4. Please note that a free trial will be available until October 31, 2023.

• *1 Compatible cloud services are Azure (Microsoft Azure), AWS (Amazon Web Services), and GCP (Google Cloud Platform). GCP is scheduled to be supported by the end of 2023.
• *2 Incidents are detected and notified based on MDfC (Microsoft Defender for Cloud) alerts. MDfC is Microsoft's solution for threat protection in cloud environments. Monitor whether cloud usage is appropriate based on Microsoft recommendations and security benchmarks.
• *3 The frequency of patrols is subject to change.
• *4 Azure: Total number of subscriptions, AWS: Number of accounts, GCP: Total number of projects.

Cloud protection service “Cloud Patrol”:
https://www.softbanktech.co.jp/service/list/cloudpatrol

■Background

In recent years, the Ministry of Internal Affairs and Communications has released the ``Guidelines for Appropriate Settings in the Use and Provision of Cloud Services'' due to the frequent occurrence of failures, unauthorized access, and information leaks caused by incorrect settings among businesses using cloud services. *5” has been released. The guidelines require organizations using cloud services to understand and manage configuration items, and recommend the use of configuration item visualization tools provided by third parties and providers. However, organizations that use cloud services face issues such as a lack of human resources with specialized knowledge, and the functionality of products that support configuration are complex and expensive, making them difficult to implement.
As a service that addresses these issues, SBT provides easy-to-use services for major companies that use many cloud products, as well as small and medium-sized customers who have previously had difficulty implementing cloud protection products due to price and operational considerations. We have started offering "Cloud Patrol", a cloud protection service that can be installed and operated.

• *5 Source: Ministry of Internal Affairs and Communications “Guidelines for appropriate settings for cloud service usage and provision” October 2022 https://www.soumu.go.jp/main_content/000843318.pdf

■Service features

1) Focus on two “risks that should be addressed immediately”

This service automatically performs regular patrols every 60 minutes and notifies you whenever a new risk is detected. Therefore, you will be able to notice if you accidentally change the settings while using the cloud. Additionally, if high-risk settings such as unintentional port openings are detected, settings can be automatically changed.

・Dangerous settings that can lead to incidents

Using unique policies and MDfC recommendations based on the knowledge that SBT has cultivated through its own cloud utilization, we monitor dangerous settings that can lead to unauthorized intrusion and information leaks, such as high-risk port openings and unintended settings.

・Alerts where an incident is suspected to have occurred

Among the alerts detected by MDfC, we monitor alerts that are suspected to be incidents, such as detection of attacks or malware, communications determined to be suspicious by threat intelligence, and detection of suspicious processes and activities.

2) You can start using it right away with simple settings

To use the service, log in to the portal from the email you receive after applying and register your cloud environment. With a simple site configuration and registration method, there is no need to make complicated adjustments with cloud integrators, system integrators, etc., and you can start using it immediately.

3) Affordable service price starting from 50,000 yen per month

Even if you use multiple clouds or tenants, you can protect up to 1,000 assets for a monthly fee of 50,000 yen.

■Provision start date

Monday, August 21, 2023

■Provided price

Monthly fee: 50,000 yen~ (excluding tax)

• *Initial cost is free.
• *Up to 1,000 protected assets can be used at the same rate. If the amount is exceeded, an additional 50,000 yen/month will be added for every 1,000 assets.
• *The contract is an annual contract.
• *MDfC must be activated through this service.
• *Notification of alerts where an incident is suspected to occur requires application of MDfC's paid functionality through this service.
• *Available as a free trial until October 31, 2023. After November 1, 2023, there will be a one-month free trial.
• *Using Azure is a prerequisite.

■Click here for service details and to apply for a free trial.
https://www.softbanktech.co.jp/service/list/cloudpatrol

■Seminar information

How to prevent "configuration errors" that are essential for cloud security - Utilization of CSPM services essential in the cloud era -
<Event overview>
Date: September 21, 2023 (Thursday) 15:00-15:30
Venue: Webinar held
Participation fee: Free (advance registration required)
Application: https://www.softbanktech.co.jp/seminar/2023/0921-01/
*Application deadline: Until 17:00 on Wednesday, September 20, 2023

■Future outlook

In the future, we plan to provide protection services for GCP by the end of this year. Furthermore, SBT will continue to work on expanding the functionality of its services to help customers solve security issues in their cloud environments.

• *Cloud Patrol is a service of SBT 's security solution brand "NOZ SECURITY." https://www.softbanktech.co.jp/noz/security/
• *Company names, product names, and service names mentioned in this release are registered trademarks or trademarks of each company.
• *Microsoft, Azure, and Microsoft Teams are registered trademarks or trademarks of Microsoft Corporation in the United States and other countries.