oak9 Releases Tython, First Open-Source Security as Code Framework and SDK

By Devon Walls.
Updated Apr 19, 2023

CHICAGO (PRWEB) April 19, 2023 - Development teams leverage Infrastructure as Code (IaC) automation to make fast and frequent changes to their cloud native architectures. The only way for security teams to keep pace with rapidly evolving software development is to embrace automation and codify security.

Now, theres a framework that makes Security as Code (SaC) available to everyone.

oak9, developer-first cloud native security leader, has released Tython, the first and only open-source SaC framework and software development kit (SDK) with a bring-your-own-language model to eliminate the challenges of existing tools and scale cloud security. Tython allows security teams to build custom security reference architectures and design patterns as code.

oak9s security architecture team has been using Tython internally for years to codify industry reference architectures from organizations like Cloud Security Alliance, NIST, AWS, Azure, GCP, OWASP, and more. The team recognized the importance of opening this framework to the larger community.

Almost every security architecture practice we speak with wants to build reference architectures, but they just dont have the time, said Aakash Shah, Chief Technology Officer and Co-Founder at oak9. Tython gives the community a way to collaborate in building security best practices and the ability to easily implement the policies they need in whichever programming languages they choose, so they can effortlessly scale within their organization.

Tython revolutionizes how security and development teams operate and collaborate it democratizes security for developers, enables development and security to operate autonomously, and creates shared responsibility around security.

Within minutes, users can clone the Tython repository from Github, and build and test their security blueprints. With the power of the oak9 platform, Tython not only identifies security design gaps, but also fixes them, regardless of the IaC language and cloud service provider (CSP) the developer chooses to use.

Tython goes well beyond configuration management approaches of existing policy-as-code languages and helps security holistically assess the entire cloud architecture, continued Shah. Security, compliance, and governance guardrails defined in Tython are enforced across the entire software development lifecycle from design to post-deployment automatically, giving developers real-time feedback for any change they make.

oak9 will share more about Tython at RSA Conference 2023 in San Francisco. Join oak9s session A Journey in Building an Open Source Security as Code Framework presented by Shah in-person on Thursday, April 27, 2023 at 8:30 a.m. PT / 10:30 a.m. CT, or catch the online stream.

Tython is being offered to current oak9 customers in beta. New and prospective customers interested in using Tython can contact oak9 directly.

Learn more at tython.io.

About oak9

oak9 secures cloud native infrastructure for developers. oak9 Security as Code continuously finds, analyzes, and remediates security and compliance issues in real-time, as changes occur in Infrastructure as Code or in the cloud. oak9s catalog of Security as Code (SaC) blueprints support 20-plus compliance standards out-of-the-box including HIPAA, HITRUST, PCI, SOC2 and ISO27001. oak9s open-sourced Security as Code also enables security engineers to extend oak9 security blueprints for additional guard rails. Headquartered in Chicago, oak9 is a Built in 2022 Start-up to Watch backed by investors Menlo Ventures, HPA, Cisco Investments, and Morgan Stanleys Next Level Fund. oak9 partners with HashiCorp, AWS, and Microsoft, and actively supports the Cloud Security Alliance (CSA) and Open Web Application Security Project (OWASP).

Keep in touch with oak9 on LinkedIn, Twitter, Youtube, and TikTok, or visit oak9.io.