Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Similar to how a Web Application Firewall (WAF) safeguards web servers, a Build Application Firewall (BAF) is specifically engineered to secure CI/CD pipelines and build systems. A BAF is knowledgeable about the protocols and communication patterns utilized in build environments, which allows it to perform real-time validation and enforce security policies effectively.
Functioning as a real-time intermediary for CI/CD communications, a BAF can impose regulations on build-time activities such as network access, fetching dependencies, managing secrets, and creating artifacts. This proactive approach not only helps thwart tampering, data leaks, and malicious code insertions but also generates documentation to support policy compliance. Furthermore, the implementation of a BAF can significantly enhance the overall security posture of the development lifecycle, making it an essential component for modern software development practices.
Description
Jozu functions as an AI-driven platform focused on securing supply chains by validating artifacts prior to their execution, managing agent activities in real-time, and maintaining a record of all actions taken afterward. The Jozu Hub acts as a self-hosted repository for models, agents, MCP servers, and skills, ensuring that each artifact is consolidated with cryptographic signatures, attestations, thorough scanning, policy regulations, and audit trails. This platform's security analysis, tailored specifically for AI, addresses various threats including concealed executable code within model packages, compromised weights, data poisoning, prompt injection, insecure tools, and violations of licensing. Users can create policies once, which are then distributed as signed OCI artifacts, and these policies are enforced during the processes of pulling, promoting, admitting, or executing artifacts. Additionally, Jozu Agent Guard operates in conjunction with workloads across servers, desktops, edge devices, and isolated systems, implementing local filtering for prompts and input-output, access controls for tools, requirement for approvals, and enforcement of policies in real-time. Through this comprehensive approach, Jozu not only enhances security but also ensures a robust framework for managing and safeguarding AI-related artifacts throughout their lifecycle.
API Access
Has API
No
API Access
Has API
Yes
Screenshots View All
No images available
Integrations
Amazon EKS
No
Amazon Elastic Container Registry (ECR)
No
Azure Kubernetes Service (AKS)
No
Databricks
No
Docker
No
GitHub Actions
No
GitLab
No
Google Kubernetes Engine (GKE)
No
Harbor
No
Hugging Face
No
Integrations
Amazon EKS
Yes
Amazon Elastic Container Registry (ECR)
Yes
Azure Kubernetes Service (AKS)
Yes
Databricks
Yes
Docker
Yes
GitHub Actions
Yes
GitLab
Yes
Google Kubernetes Engine (GKE)
Yes
Harbor
Yes
Hugging Face
Yes
Pricing Details
$2500
Free Trial
No
Free Version
No
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
InvisiRisk
Founded
2024
Country
United States
Website
www.invisirisk.com
Vendor Details
Company Name
Jozu
Founded
2023
Country
United States
Website
jozu.com
Product Features
Web Application Firewalls (WAF)
Access Control / Permissions
No
Alerts / Notifications
No
Automate and Orchestrate Security
No
Automated Attack Detection
No
DDoS Protection
No
Dashboard
No
IP Reputation Checking
No
Managed Rules
No
OWASP Protection
No
Reporting / Analytics
No
Secure App Delivery
No
Server Cloaking
No
Virtual Patching
No
Zero-Day Attack Prevention
No