Deepfence Blog

Over the past two years, we have talked to hundreds of organizations and compiled a number of case studies that highlight some of the growing costs associated with agentless scans when it comes to performing vulnerability assessments in cloud environments.

Container Security

Container Security

Container Security

Critical Analysis of Agentless Vulnerability Scans in Cloud Environments

In this blog we will outline the steps needed for the ThreatStryker CNAPP to dynamically protect the workloads, by using the available API frameworks to interface with cloud-native firewalls like AWS WAF.

Runtime Security

Runtime Security

Runtime Security

Securing Critical Infrastructure in Restricted K8s Environments

Container Security

Container Security

Container Security

September 6, 2023

Navigating Threats at Runtime: Bridging Application Context with Risk Management through CNAPP

ThreatMapper provides unprecedented visibility across the entire cloud infrastructure so how can we scale for customers who need 100K Kubernetes nodes?

Serverless Security

Serverless Security

Serverless Security

Scaling ThreatMapper: Detecting Threats on 100k Servers, 1000s of Cloud Accounts, 2500 K8s Clusters, and Beyond

In a recent Deepfence webinar, "Demystifying Kubernetes Detection and Response," leading security luminaries from tech giants Google and Snap unraveled the intricacies of Kubernetes security.

Kubernetes Security

Kubernetes Security

Kubernetes Security

Beyond the Cloud: Kubernetes Security Insights from Google and Snap

We are thrilled to announce that eBPFGuard, our groundbreaking open-source Rust library, is becoming an integral part of our cutting-edge CNAPP

Introducing eBPFGuard: A Library for Inline Mitigation of Threats using LSM Hooks

The Power of Open-Source Security: A Deep Dive

As more organizations move to the cloud, there is a growing need for cloud security solutions that can keep up with the constantly evolving threat landscape.

Container Security

Container Security

Container Security

Why CNAPP is the Future of Cloud Protection

With the blistering adoption of the cloud, combined with increased complexity due to multi-hybrid and SaaS architecture, and the exploding use of containers, serverless and other forms of cloud-native architectures, we need new strategies for securing these complex multi and...

Container Security

Container Security

Container Security

January 10, 2023

The Importance of CNAPP in Cloud Security and Key Differences Between Platforms

We’re excited to announce a new integration with AWS Security Hub at the 2022 AWS:ReInvent conference.

Container Security

Container Security

Container Security

November 29, 2022

ThreatMapper Integrates with AWS Security Hub for Improved Security Observability

In this post, we will discuss using ThreatMapper to classify various cloud-native malware, the enhancements to the Yara rulesets to identify crypto signature malware risks, and prioritize those risks using runtime context to build a better security posture.

Container Security

Container Security

Container Security

December 8, 2022

Identification and Classification of Crypto-Malware Using ThreatMapper

Aya is a library that makes it possible to write eBPF programs fully in Rust and is focused on providing an experience that is as friendly as possible for developers. In this post we are going to explain what eBPF is, why Aya started, and what’s unique about it.

Kubernetes Security

Kubernetes Security

Kubernetes Security

Aya: your tRusty eBPF companion

Deepfence YaraHunter scans container images, running Docker containers, and filesystems to find indicators of malware. It uses a YARA ruleset to identify resources that match known malware signatures, and may indicate that the container or filesystem has been compromised.

Multicloud Security

Multicloud Security

Multicloud Security

Introducing YaraHunter

Welcome to our first FAQ blog post where we recap popular questions we’ve received along with the answers to them.

Container Security

Container Security

Container Security

Deepfence FAQ – June 2022

This year’s KubeCon + CloudNativeCon Europe was an incredible, electrifying event! We hope you had as much fun engaging with new people and ideas as we did. In this post, we’ll share what we heard at the conference, highlight some recent news, and tell you what events we’re going to next.

What a Week! KubeCon + CloudNativeCon Europe 2022

There are two common approaches to security observability, vulnerability management, and workload protection: agent and agentless. We often hear from our customers and partners, “How do they compare? Which one does Deepfence use? Which way should I go?”

Container Security

Container Security

Container Security

Agent and Agentless: A Comprehensive Approach to Security

PacketStreamer is an open source tool that captures network traffic from multiple remote sources concurrently and aggregates the data into a single pcap log file. It is written in golang and supports network capture from Kubernetes nodes, Docker hosts, and bare-metal/virtual-machine servers.

Vulnerability Management

Vulnerability Management

Vulnerability Management

Introducing PacketStreamer: Distributed Packet Capture for Cloud Native Platforms

In our last few articles, we focused on vulnerability scanning of hosts and containers in AWS ECS, Azure AKS, Google GKE, and Oracle OKE. In this post, we will discuss secrets management, another important aspect of cloud native security. We are releasing an open source tool called SecretScanner to detect secrets automatically in container images, VMs, and hosts.

Container Security

Container Security

Container Security

February 4, 2021

Detecting Secrets to Reduce Attack Surface