ZeroLock Self-Protecting Container

Ransomware/Cryptoming (Cryptojacking) Protection

The ZeroLock SPC includes AI/ML models that detect cryptomining and ransomware behavior. If a vulnerability in your container is exploited by an attacker, the ZeroLock SPC is automatically protected from attempts to launch cryptomining and ransomware malware.

Container Contamination Protection

The ZeroLock SPC automatically scans your container image at runtime and prevents foreign executables from being launched inside the container. This protection prevents cluster compromise, container escapes, and many other attacks.

Rollback

The ZeroLock SPC automatically reverts malicious changes to container images and restores your container’s filesystem to remove any malicious tools added by an attacker.

Anti-tamper

The ZeroLock SPC prevents malicious attempts to disable or reduce the protection provided by the runtime agent on your container. The ZeroLock SPC protects itself from attacks that would remove security protections.

Alert and [ nothing | kill ]

The ZeroLock SPC has several automated responses that allow your container to log malicious activity, automatically kill malicious processes, and automatically restore the filesystem should your container be corrupted by malware.

Performance

Headless, self-managed, self-protecting solution for container workloads that runs as a separate process, which autonomously handles events non-interactively in the background without impacting performance on your systems.