Oligo Cyber Security Ltd. has a core belief that runtime is the ground truth for protecting critical systems. It has backed that up with a new security solution to halt exploit attempts at the application layer in real time without container or application disruption.

The company’s recent launch of Runtime Exploit Blocking is designed to move beyond a process known in the security world as Common Vulnerabilities and Exposures prioritization. Instead of defending against individual CVEs, Oligo’s solution protects against classes of attack techniques, enabling a single rule to cover whole categories of vulnerabilities.

Through its solution on AWS Marketplace, Oligo intends to unify visibility and protection across applications, cloud workloads and AI systems.

“Our claim to fame is actually seeing code live in runtimes,” said Mic McCully (pictured), field chief technology officer of Oligo. “It’s a unique thing, because once you start to see the code, you quickly realize the entire digital world is running code and that allows us to help solve a lot of the security problems for organizations. Being part of this marketplace helps us offer this solution to all of the AWS customers as well.”

McCully spoke with John Furrier, executive analyst at theCUBE Research, during an interview for the AWS Marketplace Series on theCUBE, SiliconANGLE Media’s livestreaming studio. They discussed how Oligo’s solutions are enabling enterprises to protect against a rising tide of AI-driven attacks. (* Disclosure below.)

Real-time security solution

AI is enabling threat actors to generate highly repeatable exploit techniques against organizations. Project Glasswing, an initiative from Anthropic PBC, has demonstrated how AI-enabled attackers can find and exploit zero-day vulnerabilities with greater speed and precision. This is the new reality that Oligo is seeking to address.

“The Anthropic Project Glasswing … is actually opening quite a few eyes as far as how AI is going to change the security world,” McCully said. “The fact is that these new solutions have new ways to identify and exploit applications in real time. So, providing some insight into that and even providing a platform to help protect against those types of attacks is exactly what we’ve created.”

Oligo’s platform is based on a belief that security silos, such as AppSec, cloud security and AI security, do not reflect how attacks actually occur. While the industry focuses on identifying issues, attackers are now exploiting systems in real time, which means that runtime is the only place where defenders can see what is being exploited or behaving unexpectedly.

With Oligo’s solution, runtime becomes the control plane because it connects context across applications, cloud workloads and AI systems in real time. 

“When it came to real time and running applications, a lot of time was spent just trying to identify attacks and signals of attacks and do damage control,” McCully explained. “What we believe that we’re bringing to the market is an ability to see deep inside of the application, see the code when it’s running  — and attacks happen inside of the code. If we can surface that, actually give you that lens to see those attacks … we can actually stop those attacks in line, but without impacting the ability for the application to keep functioning.”

Oligo was engineered, architected and built to operate natively on AWS. The firm’s solution on the AWS Marketplace streamlines procurement without new vendor onboarding or lengthy purchase cycles, according to McCully.

“We’ve built our infrastructure and our entire system on top of the AWS platform, which obviously lets us inherit quite a few things,” he said. “The onboarding process from an Oligo perspective is very, very easy and straightforward. We basically need to perform an install on every single host or node inside of the AWS environment, but that installation process is automated and very fast.”

Here’s the complete video interview, part of SiliconANGLE’s and theCUBE’s coverage of the AWS Marketplace Series:

(* Disclosure: TheCUBE is a paid media partner for the AWS Marketplace Series. Neither AWS, the sponsor of theCUBE’s event coverage, nor other sponsors have editorial control over content on theCUBE or SiliconANGLE.)

Photo: SiliconANGLE