Kubernetes and Container Security

Container Asset Discovery And Inventory

Performs continuous discovery and tracking of containers and container images, including automated creation of pre-built dashboards with customizable widgets. Provides topographic information on container environments including images, registries, associated containers (both active and dormant), and hosts. Collects comprehensive metadata for each image including labels, tags, installed software, layers, and association information.

Container Vulnerability Assessment

Conducts container-native vulnerability analysis with high-accuracy scanning that eliminates false positives. Provides coverage for standard Linux OS distributions, container-centric operating systems, applications, and programming languages. Generates detailed reports of vulnerable software with patchable version information. Identifies image composition through layer detail analysis.

Registry Image Scanning

Scans images stored in container registries including AWS ECR, Google Container Registry, and Azure Container Registry to detect vulnerabilities, malware, and security issues before deployment.

Devops Pipeline Integration

Integrates vulnerability analysis into CI/CD tools including Jenkins, Bamboo, TeamCity, and CircleCI. Enables policy setting based on severity QID to prevent vulnerable images from entering repositories. Provides vulnerability and patch data review capabilities within the plugin interface without disrupting development processes.

Runtime Protection And Monitoring

Implements built-in instrumentation that follows container images to enable visibility and behavior enforcement for running containers. Detects vulnerabilities, configuration drift, and behavioral anomalies in running containers. Provides classification of rogue vulnerabilities and software packages to understand anomalies.