skip to Main Content


Protecting Cloud Workloads

Existing management and monitoring tools lack the ability to detect workload configuration risks and identify malicious activity. TrueFort protects cloud workloads from compromise by actively blocking anomalous activity, on-premises or in the cloud.


Protecting Cloud Workloads

Existing management and monitoring tools lack the ability to detect workload configuration risks and identify malicious activity. TrueFort protects cloud workloads from compromise by actively blocking anomalous activity, on-premises or in the cloud.

Point solutions fail to understand application communications and dependencies

  • Shifting security threats – increased sophistication has made blocking known attack indicators ineffective .
  • Unrestricted lateral movement – after access occurs, attackers can often move across the network, unrestricted.
  • Workload protection lacks application context – security teams can’t know and validate workload behavior with application owners.
  • Security is different in the cloud – applications and their dependencies can’t be monitored from network devices during migration.

Protecting workloads requires understanding and enforcing legitimate behavior

Application-centric segmentation

Enforce workload segmentation to protect against lateral movement, ransomware, and data exfiltration attacks, sending clear and actionable insights to the SOC.

Trusted workload profiles

Continuously monitor for drift in workload behavior with a positive security model, alerting on (or blocking) activities outside of the expected norm.

Automated segmentation policies

Understand, manage, and control trust around workloads to proactively protect against unknown risks that threaten sensitive data.

Least privilege access

Learned behavior enables security teams to create least privileged access policies and avoid risk in cloud environments


Microsegmentation is a security approach which helps administrators implement the principle of least privilege and Zero Trust for individual workloads. Instead of applying one policy to an entire network or data center, microsegmentation allows security to manage traffic between workloads or applications within a network. Security policies deny user requests by default unless they present the right credentials for the specific data they’re trying to access.

Microsegmentation may be used to isolate workloads in development, testing, and production, manage connections to specific applications, limit application visibility by user, user group, or tier, and apply fine-grained controls to specific software services and processes.

Microsegmentation plays an important role in reducing an organization’s attack surface because it gives security teams control over what lateral movement to permit in any environment. With this control, experts can monitor lateral movement against predefined security policies or against a model of expected application behavior, which improves the speed of detection, response, and remediation. 

Microsegmentation makes it possible to implement granular control of network communications, credential usage, and approved behavior to help organizations minimize the impact of a cyber security incident, and solutions with automated application discovery will simplify security management even as networks grow increasingly complex. 

Microsegmentation doesn’t require a new architecture for implementation. Security teams can deploy an agent-based solution which leverages software existing agents on the workload to isolate individual hosts and containers. Solutions can apply security policies based on physical and virtual devices, including load-balancers, switches, or software-defined networks. Some cloud service providers also offer microsegmentation capabilities. 

Organizations will typically deploy both agent-based and network device models to handle all environments, including public or private cloud and on-premises networks. Solutions will use the visibility microsegmentation provides and data analytics to develop a model of normal network behavior against which anomalous events stand out for fast detection and response. 


TrueFort Platform: Zero Trust Segmentation and Workload Protection
TrueFort™ Platform Overview
lateral movement
TrueFort Lateral Movement
Back To Top

Bob Williams

Advisor | Venture Partner - West Coast, Canaan

Eileen Spellman

Maha Ibrahim, Canaan

Maha Ibrahim

Observer | General Partner - West Coast, Canaan

Lane Bess

Member - Principal & Founder, Bess Ventures & Adv.

Matt Hathaway


Matt Hathaway serves as TrueFort’s Chief Marketing Officer, leading the global marketing strategy to get TrueFort the recognition it deserves. Matt has extensive knowledge of security users, buyers, and landscape, as well as a track record of building high-performing marketing and product teams. He has over 15 years’ experience in the security market that span fraud prevention, vulnerability management, SIEM, cloud workload protection, data security, endpoint protection, and application security.

Prior to joining TrueFort, Mr. Hathaway was VP of Product Marketing at Imperva, a leader in Application and Data Security, where he led Product, Content, and Technical Marketing, SEO, and Competitive Intelligence. He was also VP of Product Marketing at Carbon Black (acquired by VMware), served in multiple product and marketing roles at Rapid7 (including through its IPO), and held product roles at RSA Security and Uptycs.

Charles Collins

Observer - Mng. Director, Emerald Development Ptrs.

Motti Finkelstein

Advisor - Sr. Advisor McKinsey & Company, Capri Ventures

Steve Katz

Advisor - Founder & President, Security Risk Solutions

Truefort customer support

TrueFort customers receive 24×7 support by phone and email, and all software maintenance, releases, and updates

For questions about our support policy, please contact your TrueFort account manager or our presales team at

Support Hotline

Email Support