Refactr
Enabling IT and Security Teams with DevSecOps

Existing DevOps tools have brought great benefits to software development teams in the form of agility and automation. However, IT and security teams continue to use traditional tools and manual approaches to deploying workloads in the cloud and implementing security. This strategic gap between teams negatively impacts IT performance and the efficiency of the infrastructure. Founded by cloud, cybersecurity and military veterans, Refactr is a company on a mission to extend the value of DevSecOps to IT and security teams. The company’s radically simple DevSecOps automation platform allows a company’s IT and security teams to centralize, standardize, and modernize their workflow through IT as Code using the latest in infrastructure-as-code, configuration management, and security automation tools. The Refactr platform connects multiple DevSecOps tools together, so IT and security teams can build IT as Code solutions to achieve continuous integration and continuous development (CI/CD) of the infrastructure and security in an automated fashion in the cloud environment. “By helping IT teams leverage our general-purpose DevSecOps for creating IT as Code, low-code automation content, we are changing the face of enterprise IT,” says Michael Fraser, CEO of Refactr.

While Terraform and Ansible are more popular with companies to build IT as Code solutions, security still continues to remain an afterthought. In addition, IT and security teams need to switch between multiple tools in a discrete manner to realize their goals, such as version control, infrastructure development, and configuration management. They need the flexibility to enforce security controls dynamically in a single platform. “We are supporting the existing DevOps and security automation tools in the market to ensure organizations leverage their existing IT investments and their teams collaborate more effectively to drive the overall outcomes,” says Fraser. “We support the security teams of our clients in building automation pipelines for customized security controls by working closely with IT teams.”

The Refactr platform needs just a simple sign up for using it. All users need to have is a basic understanding of the DevOps and security automation tools that the Refactr Platform supports. Either the clients can have their team build content using the available tools or have Refactr build it for them. The company takes an outcomes-focused approach to build the content. In the journey, it takes clients’ team along, educating them on exploring the tools within the platform for maximum benefits.

One of Refactr’s clients is using the company’s DevSecOps platform to support their chat offering built in-house. The platform acts as the automation backend with Ansible at the core. Refactr builds playbooks, does API integration, and enables security automation for specific use cases, such as blocking a particular IP address or user. By interacting with the router firewalls, the ticketing system, and other systems, the platform helps users create security automation they need to remediate every day.

The Refactr Platform is the rebranded form of the company’s Cloud + Security Architect Platform. The company has also recently introduced playbook.cloud container sandboxing solution, which is a standalone Ansible-as-a-Service offering that helps IT teams leverage Ansible from a browser, completely serverless. playbook. cloud is the first ‘Ansible as a service’ offering in the market. The SaaS-based solution can also be used in combination with other tools to enable the security teams with actionable information for improved decision-making.

With an eye of business expansion, Refactr is building strategic partnerships with the DoD who have major DevSecOps initiatives with the push to public cloud and Managed Security Service Providers who focus on mid-market and enterprise clients. The company has plans to transform its Platform-as-a -Service offering and playbook. cloud into an on-premise offering where it can be deployed into the client’s own Kubernetes by next year.