Ori Shoshan

Otterize is runtime workload security using platform-native enforcement and AI data classification. Otterize takes the capability manifest concept of mobile apps and applies it to cloud. When building an Android or iOS app, a developer declares they need access to the filesystem or camera, for example, and the system does the heavy lifting of applying the low-level policies to make it work. Otterize does that for cloud, with a concept we call IBAC (Intents-Based Access Control): declare you need access to AWS S3, a database, Kafka, or another workload on the network, and Otterize will automatically manage just-in-time AWS IAM roles, policies, users, SQL GRANTs, ACLs, and even network-level controls such as Kubernetes NetworkPolicies. Combine that with eBPF-based visibility to autogenerate these manifests by submitting automated pull requests to Git, and a Kubernetes operator (the Intents Operator) to make it possible to manage these manifests as resources on a Kubernetes cluster, and you have an end-to-end modern DevOps workflow, where developers merely need to confirm their *high-level intent*, and security teams know the policies for any R&D workload are kept minimal. Add on top a runtime DSPM that automatically tags workloads with the types of data they access, and security teams can ensure they get in the way where it matters, and stay out of the way where it doesn't through automated approvals, making it possible for them to invest their time on what needs securing.