Deepfence Blog

In this blog we will outline the steps needed for the ThreatStryker CNAPP to dynamically protect the workloads, by using the available API frameworks to interface with cloud-native firewalls like AWS WAF.

Runtime Security

Runtime Security

Runtime Security

Securing Critical Infrastructure in Restricted K8s Environments

Here are some highlights from our most recent talk with Matt Lehman, Head of Security at Amazon Payments. Matt joined us on a fireside chat last week “Runtime Security Observability for Containerized Workloads in AWS” and we asked him ten key questions and took a deep dive into container security challenges.

Runtime Security Observability for Containerized Workloads in AWS

With the blistering adoption of the cloud, combined with increased complexity due to multi-hybrid and SaaS architecture, and the exploding use of containers, serverless and other forms of cloud-native architectures, we need new strategies for securing these complex multi and...

Container Security

Container Security

Container Security

January 10, 2023

The Importance of CNAPP in Cloud Security and Key Differences Between Platforms

We’re excited to announce a new integration with AWS Security Hub at the 2022 AWS:ReInvent conference.

Container Security

Container Security

Container Security

November 29, 2022

ThreatMapper Integrates with AWS Security Hub for Improved Security Observability

Innovating at the Edge and the Constraints of Traditional IT Security

Securing the Future: Helping Companies Innovate at the Edge

Deepfence YaraHunter scans container images, running Docker containers, and filesystems to find indicators of malware. It uses a YARA ruleset to identify resources that match known malware signatures, and may indicate that the container or filesystem has been compromised.

Multicloud Security

Multicloud Security

Multicloud Security

Introducing YaraHunter

Welcome to our first FAQ blog post where we recap popular questions we’ve received along with the answers to them.

Container Security

Container Security

Container Security

Deepfence FAQ – June 2022

PacketStreamer is an open source tool that captures network traffic from multiple remote sources concurrently and aggregates the data into a single pcap log file. It is written in golang and supports network capture from Kubernetes nodes, Docker hosts, and bare-metal/virtual-machine servers.

Vulnerability Management

Vulnerability Management

Vulnerability Management

Introducing PacketStreamer: Distributed Packet Capture for Cloud Native Platforms

Shift left, secure right. Shift left initiatives empower developers and DevOps teams to deliver secure code to production. Once code has been deployed, shift left steps back and ThreatMapper takes over. We recently announced that ThreatMapper is now 100% open source. In this blog post, we explain what ThreatMapper is and how to get started.

Kubernetes Security

Kubernetes Security

Kubernetes Security

November 11, 2021

ThreatMapper picks up where Shift Left ends

As enterprises adopt to micro-services and cloud based architecture, they are slowly moving from a single cloud deployment to a multicloud deployment involving a mixture of private and public cloud platforms.

Multicloud Security

Multicloud Security

Multicloud Security

Automating Threat Mapping for Multicloud Environments