Banyan - Banyan

Product Announcement: Passwordless Authentication with Zero Trust - Improve User Experience while Enhancing Enterprise Security

We’re excited to introduce a new capability in our Oct-2019 Release of the Banyan Zero Trust Network Access Platform - Passwordless Authentication with Zero Trust. Enterprise security can roll out least privilege access controls following Zero Trust principles, while corporate users benefit from not having to enter their username and password every time they access corporate resources. Read on for a description of why we developed this feature and how you can start using it

Written by Tarun Desikan October 23, 2019

The Evolution of Zero Trust

For much of its short history, information security has been dominated by a perimeter-based network security model that essentially assumes that anyone inside the corporate network boundary was ‘trusted’ and anyone on the outside was ‘untrusted.’ This notion of trust has functioned as the basis for determining which resources or applications people can access for over 20 years. In recent years, numerous high-profile attacks have weakened the case for this model, to the point

Written by Garrett Bekker October 10, 2019

3 Principles Behind Banyan's Continuous Zero Trust Platform

Zero Trust is about not trusting anything implicitly be it the user, device, application as well as your ‘network’, which historically has been considered private and protected. With this context, relying on Virtual Private Networks (VPNs), one-time authentication or device verification, network based access controls etc is not only not enough, it creates a security challenge with broad access ramifications, should the VPNs or one-time authentication efforts be compromised.

Written by Ashish Gupta August 20, 2019

Why End Users Should be Priority #1 When Selecting a Zero Trust Network Access (ZTNA) Solution

The introduction of modern Zero Trust Network Access (ZTNA) solutions represents a giant leap forward in IT security to help enterprise organizations adapt to the new world of hybrid cloud, BYOD and 3rd party users accessing corporate applications and servers on premise or in the cloud. Traditional VPN remote access solutions are now considered legacy, outdated and not ideal for most modern cloud and hybrid environments due to broad network access security liabilities,

Written by Jacob Lee July 31, 2019

Introducing Banyan TrustScore: Your Security Credit Score for the Zero Trust Era

Imagine a world where access to sensitive corporate data is not granted based on just a corporate users’ credentials, but rather on the business sensitivity of the APIs/data they’re accessing, their typical access patterns, the vulnerability of the application and infrastructure providing access, the security profile of the location they’re accessing from, the real-time security posture of the device they’re using, and a hundred other factors that guarantees the absolute

Written by Jayanth Gummaraju June 26, 2019

What the heck is Zero Trust Security? How is it related to BeyondCorp? When can I have it?

Security teams today are bombarded with marketing around BeyondCorp and Zero Trust security. But what do these terms actually mean, how are the concepts related, and are such initiatives ready for enterprise adoption? A medieval Engish castle that relies on a perimeter moat and strong walls for defense A brief history of BeyondCorp and Zero Trust Let’s start with a bit of history. Traditional network security architectures were like medieval English castles with strong

Written by Tarun Desikan June 04, 2019

Zooming into Zero Trust with Strategic Partnerships

Continuous Zero Trust is the natural approach to delivering BeyondCorp architecture that addresses hybrid and multi-cloud application access challenges. Be it developers accessing web-based development environments or contractors accessing enterprise web applications, traditional network-based access controls and authorization mechaninisms are just not enough and are painfully complicated and slow. This emerging challenge for a dynamic workforce and distributed application

Written by Banyan Team May 01, 2019

Over 30% of Official Images in Docker Hub Contain High Priority Security Vulnerabilities

Docker Hub is a central repository for Docker developers to pull and push container images. We performed a detailed study on Docker Hub images to understand how vulnerable they are to security threats. Surprisingly, we found that more than 30% of images in official repositories are highly susceptible to a variety of security attacks (e.g., Shellshock, Heartbleed, Poodle, etc.). For general images – images pushed by docker users, but not explicitly verified by any authority –

Written by Banyan Team May 26, 2015