Deepfence Blog

As more organizations move to the cloud, there is a growing need for cloud security solutions that can keep up with the constantly evolving threat landscape.

Container Security

Container Security

Container Security

Why CNAPP is the Future of Cloud Protection

As the new year begins, we wanted to highlight a few trends and predictions we believe will be relevant for organizations when it comes to cloud security initiatives, attacks, and compliance in 2023.

Security Observability

Security Observability

Security Observability

January 5, 2023

Looking Ahead: Cloud Security and Compliance Trends in 2023

Deepfence’s ThreatMapper has released an update that enables users to inventory cloud assets and check for compliance with standards supported by Steampipe. Open source users from both communities saw an opportunity to integrate compliance checks with threat mapping and security risk assessment. They contributed a core integration with Steampipe, and Deepfence added UI elements to help users prioritize remediation efforts.

Security Observability

Security Observability

Security Observability

August 16, 2022

ThreatMapper Integrates Steampipe to Enhance Security Observability

The cybersecurity industry is a complex landscape populated by many different tools that solve many different problems: managing vulnerabilities, preventing misconfigurations, protecting workloads, detecting ransomware, and so on. For these known issues, there are many widely available solutions. But what about unknown security risks – the issues that you cannot see?

Security Observability

Security Observability

Security Observability

Security Observability: The Missing Link in Your Cloud Native Security Toolset

Innovating at the Edge and the Constraints of Traditional IT Security

Securing the Future: Helping Companies Innovate at the Edge

Carrying forward the incredible experience we had recently at KubeCon + CloudNativeCon Europe, the Deepfence is thrilled to be part of this year’s RSA Conference in San Francisco, June 6 – 9.

We’re on the Way to RSA

Deepfence YaraHunter scans container images, running Docker containers, and filesystems to find indicators of malware. It uses a YARA ruleset to identify resources that match known malware signatures, and may indicate that the container or filesystem has been compromised.

Multicloud Security

Multicloud Security

Multicloud Security

Introducing YaraHunter

There are two common approaches to security observability, vulnerability management, and workload protection: agent and agentless. We often hear from our customers and partners, “How do they compare? Which one does Deepfence use? Which way should I go?”

Container Security

Container Security

Container Security

Agent and Agentless: A Comprehensive Approach to Security

Adding to the excitement of this week’s KubeCon + CloudNativeCon, we’re pleased to announce the launch of our fully managed security observability offering, Deepfence Cloud. Customers now have an end-to-end security observability solution to secure their entire cloud native estate with even greater speed and ease.

Product Releases

Product Releases

Product Releases

Meet Deepfence Cloud

PacketStreamer has generated lots of buzz and garnered widespread support from the community. Today, we’d like to dive a bit deeper into some of the specific ways to use PacketStreamer.

Vulnerability Management

Vulnerability Management

Vulnerability Management

Network Traffic Observability: Three PacketStreamer Use Cases

Deepfence CEO and founder, Sandeep Lahane, recently had a chance to catch up with Emily Omier, a strategist and consultant who helps cloud native startups with their positioning. Sandeep joined Emily on her podcast, aptly named “Cloud Native Startup.”

Security Observability

Security Observability

Security Observability

Deepfence’s Sandeep Lahane Featured on the Cloud Native Startup Podcast with Emily Omier

According to Greek mythology, Zeus punished Sisyphus for cheating death (twice!) by forcing him to roll a boulder up a hill only for it to roll down each time it neared the top, repeating this action for eternity. The thought of this continuous, repetitious battle that Sisyphus waged against the weight of the boulder brings to mind the challenges facing today’s security teams.

Vulnerability Management

Vulnerability Management

Vulnerability Management

The Sisyphean Task of Vulnerability Management and How to Break Free

The log4j2 vulnerability like the OpenSSL Heartbleed and Apache Struts vulnerabilities that came before it are poignant reminders to digital businesses that it’s not just enough to respond to a vulnerability by redeploying applications once a patch is available, you also have to be able to discover instances of the vulnerability being exploited in real time in your production platform and stop them. In this tutorial, we’ll show you how to use Deepfence ThreatMapper and ThreatStryker to help you do just that.

Security Observability

Security Observability

Security Observability

January 10, 2022

How to Detect and Defeat the Log4j2 Vulnerability with Deepfence

The huge advances in ‘Shift Left’ processes makes it possible to deliver code to production that is secure and largely free from vulnerable dependencies. Among other things, these processes typically involve matching dependencies against public vulnerability lists from Mitre, Red Hat, Debian, and other projects.

Vulnerability Management

Vulnerability Management

Vulnerability Management

December 17, 2021

Visualize Attack Paths in Production Environments with ThreatMapper

The gravest cyber threat of modern times is upon us in the form of CVE-2021-44228. Here are some key resources.

Vulnerability Management

Vulnerability Management

Vulnerability Management

December 12, 2021

CVE-2021-44228: Log4j2 Exploitability & Attack Path Mitigation with ThreatMapper