Kubernetes and Container Security (KCS)

Container Asset Discovery

Performs continuous discovery and tracking of container assets including images, registries, associated containers (both active and dormant), and hosts. Provides comprehensive metadata collection for every image including labels, tags, installed software, layers and association information.

Container Vulnerability Assessment

Conducts container-native vulnerability scanning and analysis with coverage from standard Linux OS distributions to container-centric operating systems, applications and programming languages. Provides detailed reports of vulnerable software with patchable version information. Identifies image composition through layer details.

Container Configuration Security

Evaluates container workloads against industry standard benchmarks for secure configuration, specifically CIS for Docker, to identify and address misconfiguration issues.

Container Registry Scanning

Scans container images in registries to detect vulnerabilities, malware, and compliance violations before deployment.

Container Malware Detection

Scans and eliminates malware from container images stored in registries.