About Sonrai
Sonrai sells identity, access, and permissions security for companies running on AWS, Azure, and Google Cloud platforms. Sonrai is a public cloud identity and access management solutions provider. Sonrai Security states a mission to empower enterprises of all sizes to innovate securely and confidently. Sonrai Security has offices in New York and New Brunswick, Canada.[1]
Guardrails are described as action-based, covering AWS, Azure, and GCP. Deployment is described as covering agents, humans, and machines. The Cloud Permissions Firewall removes dangerous permissions before an attack can use them. The Cloud Permissions Firewall blocks unused privileges, services, and regions with automated global policies.[2]
Controls come from SCPs and RCPs, Azure RBAC, and GCP deny policies, with no proxy, no broker and no bastion host. Policies are built from usage data, anything in use is exempted before a policy is written, and nothing enforces until deployment. Blocked usage attempts open a request that is routed in Slack, and the policy is updated. An automated just-in-time workflow is routed through a ChatOps tool when an agent, human or machine needs new access. Access is automatically revoked when the allocated time is over, and everything is logged. WALLy is an AI-powered companion inside the Cloud Permissions Firewall app.
Permissions analytics involve ongoing analysis of over 42,000 cloud permissions to categorize and risk rank them. Patented intelligence prioritizes actions and identifies toxic combinations. Cloud expertise extends to policy strategy, deployment and management. Further analysis reveals toxic combinations of permissions and policies, and remediation options break down attack paths.[7]
Only read-only access to the cloud is needed, and controls can be deployed where the customer chooses. Sonrai does not possess customer data or install agents in the customer's cloud, and gathers metadata from the role provided.[8]
Sonrai Dig enabled a customer's CCOE team to establish a baseline and continuously monitor identities and data across multiple public cloud resources. Sonrai Dig shows IAM relationships in a single picture. World Fuel Services is a global fuel provider. Sonrai provides security controls for World Fuel's 200+ AWS accounts and Azure subscriptions. Sonrai helped a bank customer rebuild its custom policies in a cloud-centric way, using prebuilt frameworks and nightly categorization of all new cloud actions. Sonrai replaced a customer's CSPM with a solution powered by identity and data analytics and a history of cloud activities. Sonrai sees the exact identity chain that enables an action in cloud to be performed, including through multiple trust relationships.[10][11][12]
Banks in the US and Canada use Sonrai to secure their cloud, alongside customers from other highly regulated industries. Sonrai is a SOC2 Type-2 compliant organization. Sonrai offers a monthly contract with monthly payments, and monthly contracts can be cancelled at any time with 30 days notice.[8][10]
Sonrai on the record