Sysdig introduced a risk checklist dubbed ToDo and a guided remediation function called Remediation Guru to its cloud security posture management (CSPM) service to aggregate security findings by root cause and prioritize remediation based on impact. 

The container and cloud security unicorn added the CSPM capabilities to its Sysdig Secure platform last March. With ToDo and Remediation Guru the company aims to target alert fatigue issues in the multicloud environment and be a trusted security adviser for customers.

The Sysdig Secure platform offers alerts for runtime events, vulnerabilities, and compliance failures. The latest features aggregate the results that have the same risk root cause and offer “a clear remediation path” by guiding users to take the highest impact actions, Maya Levine, product manager at Sysdig, told SDxCentral.

The Remediation Guru function also automatically generates pull requests that map misconfigurations in production to infrastructure-as-code (IAC) manifests to fix configuration risks at the source. 

“What we can do is offer the ability to do a pull request, basically just make a change to that source file within Sysdig,” Levine explained, adding that for some issues the feature also offers automated remediation.

Sysdig also helps users adopt a shared policy model using Open Policy Agent (OPA) policy-as-code to address inconsistency challenges in policies and controls across the multicloud environment.

“The share the policy model is really about helping organizations consistently enforce the same policies throughout the different stages of the software delivery pipeline,” Maor Goldberg, VP of product management at Sysdig, added.

The new features are available for free in the Sysdig Secure platform. The ToDo function is available on request and the Remediation Guru is available as a tech preview to platform users. 

“We address the key three security challenges over ability management, security posture management, and runtimes for detection in one unified user experience, and ToDo and Remediation Guru will be part of that,” Goldberg said.