Sonrai Launches a 'Cloud Permissions Firewall' — and a New Category

Sonrai Security has launched what it calls the industry's first Cloud Permissions Firewall, a product aimed at one of cloud computing's ugliest numbers: across AWS, Azure, and Google Cloud there are more than 42,000 possible permissions, thousands of which can be leveraged to expose data, escalate privileges, or move laterally through an environment.

The pitch

Traditional cloud identity tooling finds excessive permissions and files tickets; someone still has to fix them, one policy at a time. Sonrai's firewall inverts the model — a one-click least-privilege enforcement layer that restricts unused and risky permissions globally, with exemptions granted on request rather than access revoked by hand. The company's promise is "zero disruption" for development and operations teams, historically the constituency that kills security lockdown projects.

The New Brunswick thread

Sonrai is headquartered in the U.S. but its engineering roots run through Fredericton, where co-founder Sandy Bird — previously co-founder of Q1 Labs, the company that became IBM's QRadar — anchors a development team drawn from the same security talent pool that has powered the city's cluster for two decades.

It's a familiar pattern: the Q1 Labs diaspora keeps producing companies that compete in global security categories from a province of 800,000. A genuinely new product category — if the market agrees that's what this is — would be the strongest entry yet.

Sources

• Unveiling the Sonrai Cloud Permissions Firewall — company product announcement
• Sonrai Security simplifies cloud access and permissions with new firewall service — SiliconANGLE coverage of the April 2024 launch