Founded by the creators of Apache Spark and Delta Lake, Databricks is a data and AI company headquartered in San Francisco. Its mission is to help data teams solve the toughest problems. Its customers include retail, financial services, manufacturing, healthcare, and transportation companies.
Databricks offers a number of security features, including native authentication and table access control. These features help ensure the security of securable objects such as databases and SQL views. They can be configured and managed by administrators.
Databricks also supports a system for cross-domain identity management (SCIM). Most IdPs support SCIM, which synchronizes users and groups to Databricks. This means that you can configure Databricks to use the correct credentials for all users and groups.
Databricks also provides a number of tools for securing network infrastructure. For example, it provides an Azure Private Link. This uses the Azure backbone to encrypt all traffic. This allows you to mitigate against data exfiltration.
You can also manage access control lists for Databricks resources. Access control lists allow you to control who has access to a specific object. You can use the Permissions API or the Token Management API to set permissions on a user or group. Databricks administrators can also assign object owners to grant access to securable objects.
Databricks supports multiple security features, but not all of them are available on all tiers. For example, the E2 version of the platform provides secure cluster connectivity (SCC) by default. For workspaces that have secure cluster connectivity, the Premium plan is required. For more information, see the Security and Compliance Guide.
Databricks also supports Azure Private Link, which encrypts all traffic. This feature can help you comply with HIPAA and other data protection laws. However, you need to create an endpoint route for your workspace to direct traffic to the STS service.
When you first create a Databricks workspace, you will need to specify whether or not you want to create a customer-managed VPC. If you select this option, you will be required to provide a VPC ID and security group ID.
Orca Security
Founded in 2009, Orca Security is a cloud security innovation company based in Los Angeles, CA. The company provides security for public cloud platforms, including Microsoft Azure, Google Cloud Platform, and Amazon Web Services. With hundreds of customers worldwide, Orca is trusted to protect cloud-based information. The company is also known for its ability to detect malware and misconfigurations without the need for agents.
Orca recently raised a series C round of $550 million, led by Iconiq Capital and CapitalG, and also received a number of other investments. Other investors include Lone Pine Capital, Adams Street Partners, and Redpoint Ventures. In a press release, Orca said the money would be used for geographic expansion and the development of its partner program.
Orca has been on an explosive trajectory since its founding. It recently opened a new office in Austria and plans to expand its footprint in Australia and the U.K., as well as grow its R&D and sales teams in the coming years. The company recently launched a version of its website in multiple languages.
The company’s most important innovation is its agentless, cloud-native application protection platform, which allows security teams to rapidly analyze all of their cloud assets. The platform uses a patented SideScanningTM technology to detect vulnerabilities, misconfigurations, and critical attack vectors. It also detects lateral movement risk, authentication risk, and high-risk data. It also eliminates performance hits on live environments.
Orca also announced that it has hired a chief marketing officer, Meghan Marks, to help market the company’s solutions to customers. Marks is a seasoned marketing executive who has previously held leadership roles at companies such as Puppet, Twistlock, and Palo Alto Networks’ Prisma Cloud business unit. She was also the CMO of Palo Alto Networks’ Prisma App Platform, where she launched the first cloud security solutions in the marketplace.
Conclusion
In other news, Orca Security recently launched a version of its website in several languages. The company is also opening a new R&D center in London, which it plans to open by the end of the year.