Project Monterey or How I Learned to Stop Worrying and Love the Cloud
summary
Project Monterey is a Python framework that runs and scales existing scanners across dynamic cloud fleets, automatically discovering new apps via Asgard and Kronos, launching lightweight worker “monkets” to run tools like OWASP ZAP, NMAP, Nessus, chaining outputs into ThreadFix for trend tracking, and alerting or driving rollbacks. It converts ephemeral deployments into continuous security scans, reduces mean time to detection in a multi‑version environment, and is slated for open source release.
AI-written summary · about
chapters (14)
- 0:00Intro
- 1:15Developer Enablement
- 3:12Automating Processes
- 6:03Netflix Environment
- 8:01Why Project Monitoring
- 11:03Monterey Overview
- 14:41Scaling Traditional Tools
- 16:46Third Power Tools
- 21:01Open Source Tools
- 23:56Chronos
- 26:39Monterey Roadmap
- 30:08Take Aways
- 34:11Security Monkey
- 43:16Use Cases
related talks
47mFuture-proofing cloud security: A new operating model
31mCloud Security Wildlife: A Tale of Otters, Monkeys and Security?
35mContinuous Cloud Security Automation
37mGoing Bananas for Cloud Security: AWS deployment with security_monkey
31mUnleash the Infection Monkey: A Modern Alternative to Pen-Tests
50mScaling Security Assessment at the Speed of DevOps
47mContainerizing your Security Operations Center
33mCloud Foundry Runtime PMC Overview - Dieu Cao, Pivotal