Tenable Cloud Security | Detecting malicious IaC code

Protect Your Infrastructure from Hidden Threats

Shifting security left is key, but did you know that infrastructure provisioning code can itself be malicious? Recent research by our senior researcher, Shelly Raban, uncovered how certain Terraform commands can leak sensitive data—even before you hit "apply."

With Tenable Cloud Security, you can now detect and mitigate these risks, safeguarding your environments from this emerging attack vector.

Explore how Tenable Cloud Security empowers you to stay ahead of these threats.

Demo Video

Blog: The Dark Side of Domain-Specific Languages: Uncovering New Attack Techniques in OPA and Terraform