NeuVector Full Lifecycle Container Security

Container Firewall

Detect and mitigate application threats with Layer 7 network inspection. Application level attacks such as DDoS and DNS on containers are detected and prevented. Real-time detection and alerting adds a layer of network security to the dynamic container environment. Protects containers against attacks from internal and external networks. Prevent data stealing attacks which use DNS and ICMP tunneling techniques. Automatically captures packet used in an attack.

Workload Protection

NeuVector discovers the normal behavior of container processes, file system, and network activity and automatically builds a security policy to protect container based services. Using Layer 7 network inspection, unauthorized connections between containers or from external networks can be blocked without disrupting normal container sessions.

Vulnerability Scanning and Compliance Management

NeuVector automates security for the entire CI/CD pipeline, from Build to Ship to Run. Use the Jenkins plug-in to scan during build, monitor images in registries and run automated tests for security compliance. Prevent deployment of vulnerable images with admission control, but also monitor production containers. Run-time vulnerability scanning for containers, hosts, and orchestration platforms. Audits host and container security with Docker Bench and Kubernetes CIS Benchmark for security tests.