Cloud Security Center_situation awareness _ host security _ vulnerability scanning

Cloud Security Center

Play video

The Cloud Security Center is a server host security management system that identifies, analyzes and alerts security threats in real time. Through security capabilities such as anti blackmail, vulnerability scanning and repair, anti-virus, anti tampering, and compliance inspection, it helps users achieve automated security operation closed-loop for threat detection, response, and traceability, and protects the security of cloud hosts, local servers, and containers, And meet regulatory compliance requirements. Refer to 95187-1 for details

[99 Plan] Vulnerability repair value-added service package starts from 169 yuan per year

Free trial Free manual consultation View product documentation Vulnerability scanning service

Latest activities Preferential activities [99 Plan] Vulnerability repair value-added service package: 35% off, from 169 yuan per year Preferential activities [Sharing with the old and the new] Cloud security center package is 70% off

Recent important functions Heavy release [Vulnerability repair] Cloud Security Center vulnerability repair is sold and released by time (2 yuan/time/month) new function [Application Protection] Provide runtime security defense for applications

Main product specifications

Value added services_vulnerability repair

Provide your system vulnerability one click repair capability

Number of bug fixes

20 times

Purchase duration

1 month

￥ forty .00 /1 month

Discount price on official website : ￥ 40.00/1 month

Cloud Security Center_Antivirus Version

One click virus detection and disposal

Version selection

Antivirus version

Calculate the number of cores

one

Purchase duration

1 year

￥ fifty-four .00 /1 year Learn about offers

Discount price on official website : ￥ 54.00/1 year

Cloud Security Center_Advanced Edition

Fully establish host security defense system

Version selection

Advanced Edition

Number of servers kept

one

Purchase duration

1 year

￥ six hundred and twelve .00 /1 year Learn about offers

Discount price on official website : RMB 612.00/1 year

Cloud Security Center_Enterprise

Easier to meet compliance inspection requirements

Version selection

Enterprise Edition

Number of servers kept

one

Purchase duration

1 year

￥ one thousand eight hundred and eighty-seven .00 /1 year Learn about offers

Discount price on official website : ￥ 1887.00/1

Cloud Security Center_First Edition

Effectively protect containers

Purchase duration

1 year

Enquiry in progress

Value added service_cloud platform configuration check

Provide you with the best security standard check for AliCloud platform configuration

Cloud platform configuration check scanning times

1000 times

Purchase duration

1 month

Enquiry in progress

Value added service_anti blackmail backup space

Anti blackmail virus space, data backup in advance

Anti extortion custody service

no

Anti blackmail

100GB

Purchase duration

3 months

Enquiry in progress

Value added service_malignant file detection

Simple and batch malicious file detection service

Number of malicious file detection

100000 times

Purchase duration

1 year

Enquiry in progress

Application scenarios

Equal assurance compliance scenario

Hybrid virtual machine security scenario

Container security scenario

Equal Assurance Compliance Security Solution

For the requirements of intrusion prevention, identity authentication, security audit and other aspects of server host security in Level II and Level III of Equal Protection 2.0, the Cloud Security Center can answer the requirements of 15+equal protection standards

Capable of providing

Intrusion prevention

The vulnerability scanning function of the Cloud Security Center supports the scanning and one click repair of system vulnerabilities and application vulnerabilities; Support real-time detection and defense of host intrusion and file samples, and support alarm of active outreach and malicious attacks on server hosts; Support malicious code detection and prevention - detection of mining, blackmail, worms, DDoS trojans, etc

Identification

Check the password complexity of login server host and application system for security configuration, and support anti brute force cracking; Support security check on the configuration of cloud products used by users

security audit

Support to record 14 types of server host logs of 3 types, and audit through logs; Logs can be saved for 6 months

Recommended combination

Cloud firewall

web application firewall

Fortress machine

Data Security Center

Unified security management of hybrid virtual machine

The Cloud Security Center supports server hosts in various environments such as Alibaba Cloud, offline IDC, and other cloud manufacturers. Through the Cloud Security Center console, it can achieve unified protection, operation and maintenance of servers on and off the cloud, including virus detection, vulnerability scanning, anti blackmail and other security protection, and reduce security management costs

Capable of providing

Simple and rapid deployment

Under the condition that the network is accessible, you only need to install agents offline or on other ECS hosts to achieve unified management

Safe water level rise

Pull the security water level of non Alibaba Cloud server hosts through the cloud security center, and the cloud detection capability directly covers offline servers

Low safety management cost

One console manages all server host security

Recommended combination

web application firewall

Cloud firewall

Safety housekeeper

Container Security Solution

Based on Alibaba Cloud container security ATT&CK attack and defense matrix, the Cloud Security Center focuses on the three life cycle stages of container construction, container deployment, and container operation. Through cloud native mode, container security capabilities are built in a multi-dimensional way to provide all-round security assurance for enterprise cloud containerization process

Capable of providing

Secure trusted image

In container construction, it supports continuous image vulnerability scanning, image supply chain security through trusted signature, and malicious use detection of Docker cp and Docker runcDirtycow to provide a secure computing environment for containers

Continuous configuration check

The cloud security center supports regular configuration checks covering Docker&Kube baselines to meet the security configuration requirements during container deployment

Run real-time detection

Based on the 200+security detection model, it implements container escape prevention and real-time threat detection, supports comprehensive vulnerability scanning and repair of containers, and comprehensively covers system vulnerabilities, application vulnerabilities, emergency 0Day vulnerabilities, etc

Recommended combination

Container Service ACK

Container image service

Product advantages

Why Alibaba Cloud Security Center

High stability and high availability

The installed capacity of millions of server hosts and CPU utilization rate are lower than 10%; The server is deployed in multiple machine rooms to effectively ensure the high availability of the system

Unified security management

Support threat management and control of server hosts, containers and cloud products throughout the network, and deploy offline IDC and other cloud platforms for unified management and control

Safety closed-loop capability

Actively intercept mainstream virus trojans, comprehensively scan vulnerabilities, and repair vulnerabilities/baseline unsatisfied items with one click to reduce user operation and maintenance costs

Comprehensive attack detection

Collect host logs of three types of 14 types of servers, and the 250+threat detection model provides full link threat detection capability

Product Functions

Safety precautions

Vulnerability scanning and repair Mainstream system and software vulnerability scanning, and support one click vulnerability repair.

Cloud platform configuration check Based on the cloud platform security practice, the ability to link cloud products forms a security closed-loop.

Baseline inspection Reduce the risk caused by improper configuration based on Alibaba Cloud's best configuration checklist.

Active defense

Anti blackmail and anti-virus Real time intercepts seven kinds of known blackmail viruses, mining, worms, DDoS and other viruses.

Tamper proof Prevent websites from being implanted with terrorism and politics, dark chains, backdoors, etc., and ensure normal web pages.

Application whitelist Prevent unauthorized applications from starting abnormally and affecting normal business operation.

Threat detection

250+threat detection model It provides you with a full link threat detection capability, so that hackers have nowhere to hide.

Alarm automatic analysis and correlation Automatically correlate alarms, identify intrusions caused by low-risk exceptions, and improve operational efficiency.

Security situation The security screen shows the network security situation in a multi-dimensional way, including friends, enemies and threats.

Survey&Response

Automated attack traceability Automatically trace the source and cause of the attack to help users understand the intrusion threat and respond quickly.

Log analysis&audit Provide log audit and analysis capabilities, and provide a platform for attack traceability and compliance.

Container safety

Image vulnerability scanning It supports deep vulnerability scanning of container images and provides vulnerability repair solutions.

Container threat detection Container runtime and K8S threat detection.

Container firewall It provides integrated network firewall services of intelligent learning, alarm and interception of access control policies for the container environment.