GravityZone Security f.Containers

Containers and Linux share a kernel — and that is exactly where the attacks land.

Description

Containers bring speed to development, and an attack surface of their own. Process hijacking, container escapes and malicious scripts target the shared kernel, memory access and everything that reaches out of the container. Traditional endpoint security struggles here.

GravityZone Security for Containers protects container workloads with AI-driven threat prevention, purpose-built Linux anti-exploit technology and context-sensitive detection and response. Memory access monitoring detects and blocks exploit techniques before they turn into an incident. Behavioural analysis and zero-day protection map attacks to the MITRE ATT&CK framework, so Linux-specific threats can be identified and dealt with directly.

The approach is kernel-independent: one agent covers multiple Linux and container distributions, which removes compatibility problems when you move between them. Containers are covered through a host-based agent and container-native telemetry, on premises and in the cloud alike. Attack forensics and visualisation make an intrusion readable in its full context and show where cleanup has to start.

What's included

• Full visibility – containers and workloads across hybrid and multi-cloud environments.
• Advanced exploit protection – memory access monitoring and defence against process hijacking, container escapes and malicious scripts.
• Attack forensics – visualisation of container attacks and how they connect.
• Kernel-independent security – one agent for multiple Linux and container distributions.
• MITRE ATT&CK mapping – behavioural analysis and zero-day protection for Linux threats.

Who it's for

The module fits DevSecOps and platform teams running containers on Kubernetes, Docker or Podman, on premises or in the cloud. It complements Cloud and Server Security and forms part of GravityZone's consolidated cloud native security approach.

Good to know

• Supported platforms – Docker, Podman, Kubernetes, Amazon ECS, Amazon EKS, Azure Kubernetes Service and Google Kubernetes Engine; new platforms are added regularly.
• Operation – managed from the central GravityZone console.
• Licensing per device and term
• Renewal through the renewal product of the same name

All prices net plus 19% VAT.