Rubrik Bolsters DevOps Security with Cyber Recovery for Azure DevOps and GitHub
Rubrik introduces enhanced cyber recovery capabilities for Azure DevOps and GitHub, featuring anomaly detection, blast radius investigation, and surgical recovery to protect source code.
Rubrik has announced the integration of advanced cyber recovery features specifically designed for DevOps platforms, including Microsoft Azure DevOps and GitHub. These new capabilities aim to provide organizations with robust protection for their source code, which is increasingly targeted by attackers seeking to disrupt development and intellectual property.
The enhanced offering incorporates three key components: anomaly detection, blast radius investigation, and surgical recovery. Anomaly detection continuously monitors audit logs and backup metadata to identify suspicious activities that deviate from normal developer behavior. This helps in flagging potential compromises early, even when attackers use stolen credentials to mimic legitimate actions.
Blast radius investigation provides a clear view of the extent of an attack. It categorizes affected assets across repositories, commits, pipelines, workflows, and settings, enabling security teams to precisely scope the impact. This detailed insight is crucial for understanding what needs to be restored and preventing further spread of malicious code.
Surgical recovery allows organizations to restore only the specific changes made by attackers, leveraging immutable and air-gapped backups. This granular recovery process ensures that legitimate work from other developers is preserved, avoiding the need for disruptive manual rebuilds or organization-wide code freezes, thereby maintaining development velocity.
According to Gartner, software engineering leaders are increasingly adopting DevSecOps platforms, which house critical intellectual property like source code and CI/CD pipelines. This makes these platforms a prime target for identity-driven attacks. Rubrik's solution addresses this by operating natively within its Security Cloud, connecting detection, investigation, and recovery into a unified workflow.
Beyond code, Rubrik DevOps Protection (Foundation Edition) now also backs up broader platform metadata, settings, and the developer collaboration stack. This includes items like issues, pull requests, wikis, and organization settings, enabling a more comprehensive recovery of the entire software development context.
Rubrik's Chief Product Officer, Anneka Gupta, emphasized the critical nature of source code as a hub for innovation and a target for attackers. She highlighted that compromised credentials can lead to rapid, widespread malicious code injection before detection, underscoring the need for specialized protection.
The new cyber recovery capabilities for DevOps platforms are expected to be generally available in the coming months, offering a significant advancement in securing the software development lifecycle against sophisticated cyber threats.