VMware provides container runtime safety to Carbon Black safety portfolio

VMware is getting into the race to safe trendy, cloud-native environments by including container runtime safety to its Carbon Black Container safety product, which it launched in April 2021.

Defending cloud-native environments at runtime is presenting builders and safety professionals with a complete new set of safety issues, main them past simply hardening a Kubernetes cluster and into the realms of dynamic vulnerability scanning, identification administration, and entry controls.

As a result of containers are being spun up and down on a regular basis, securing container environments is considerably difficult, with a necessity for higher visibility and automation to maintain containers safe and compliant always.

To satisfy these challenges, VMware is including the next options to its Carbon Black Container safety product:

• Runtime cluster picture scanning: Safety or devops groups can automate runtime vulnerability scanning and customise insurance policies to assist guarantee container photos are at all times safe.
• Built-in alerts dashboard: To view occasions and anomalies in a runtime setting for more practical investigation, correlation, and backbone of safety occasions.
• Kubernetes visibility mapping: View the structure of an utility to raised perceive vacation spot connections, potential workload coverage violations, and weak photos.
• Workload anomaly detection: Standardize networking modules and alert safety groups to deviations.
• Egress and ingress safety: Added visibility into any exterior supply that’s reaching out to a Kubernetes service for simpler detection of malicious egress connectivity primarily based on the IP tackle and the behavioral information.
• Risk detection: Scans open ports to examine for vulnerabilities and shortly see if there’s a lateral assault in progress.

“Defending the runtime is the muse of securing the interior workings of a contemporary utility,” Tom Gillis, basic supervisor for networking and superior safety at VMware, mentioned in an announcement. “With the introduction of container runtime safety, our end-to-end safety providing is now tightly built-in throughout all the utility lifecycle, protects all east-west visitors, and brings a brand new degree of distributed visibility and safety to APIs.”

This want for higher runtime safety has led to a fast-growing ecosystem of startups and safety distributors, together with startups like Deepfence, Sysdig, Aqua Safety, Anchore, and Lacework, in addition to distributors who’ve acquired these capabilities, akin to Palo Alto Networks’ TwistLock, Crimson Hat’s StackRox, and Suse’s NeuVector.

Container runtime safety is on the market instantly for superior bundle prospects of VMware’s Carbon Black Container.