Dykondo by GrammaTech is an automated solution for container debloating, designed to reduce the attack surface and optimize edge deployments. Container images often contain unnecessary software, libraries, and other files that are not required for a given deployment, creating unnecessary attack surfaces and overhead. Dykondo removes bloat from recognized types of applications and files, returning the debloated result as a container image. It reduces image size without the need for fine-tuning Dockerfiles, lightens storage and bandwidth requirements for edge device deployment, and reduces false positive vulnerabilities from static container scanning tools. Dykondo debloats an application’s container image by retaining necessary files while removing unnecessary system files.
