The Yandex B2B Tech team announced the launch of the Yandex Security information security direction. The company plans to develop solutions for protecting not only cloud, but also on-premise, hybrid, and multi-cloud infrastructures.

One of the new tools is Security Deck for centralized security control of a multi-cloud environment. The service collects information about access, configurations, and potential risks in a single interface, helping to identify vulnerable areas of the infrastructure regardless of the cloud platforms used.

Identity Hub will feature passwordless authentication based on WebAuthn/FIDO2. Employees will be able to confirm login using biometrics or a hardware key. Administrators will be able to configure multi-factor authentication scenarios and, if necessary, completely abandon passwords.

Yandex Smart Web Security has added a JS-Challenge mechanism for automatic verification of website visitors for bots. The system assesses the risk of requests and initiates additional verification only in case of suspicious activity.

Another new tool is Access Analyzer in Security Deck. It analyzes granted rights, helps find excessive permissions and unused service accounts, and also suggests more precise roles in accordance with the principle of least privilege.