Deepfence Blog

January is a time of fresh starts, but 90% of New Year’s resolutions fail by January 15th. For cloud security professionals, the struggle is similar: identifying risks is easy, but resolving them is the real challenge. This blog explores how starting with the basics, staying consistent, and prioritizing effectively can help resolutions stick—both personally and in securing cloud environments.
Cloud Security
Cloud Security
Cloud Security
January 2, 2025

Resolutions That Stick: Lessons from New Year’s Goals and Cloud Security

Read more
In today’s complex cybersecurity landscape, not all vulnerabilities are equal. Learn how Deepfence’s framework helps security teams prioritize and patch the most exploitable risks.
Vulnerability Management
Vulnerability Management
Vulnerability Management
October 10, 2024

Tackling the Most Exploitable Vulnerabilities: Prioritization in a Sea of Risks (Exploitability in Cloud Series - Part 1)

Read more
An in-depth exploration of AI-driven cloud security and how it revolutionizes remediation for security practitioners.
February 15, 2024

Mastering AI-Driven Cloud Security: Embracing A New Era of Remediation

Read more
ThreatMapper provides unprecedented visibility across the entire cloud infrastructure so how can we scale for customers who need 100K Kubernetes nodes?
Serverless Security
Serverless Security
Serverless Security
June 1, 2023

Scaling ThreatMapper: Detecting Threats on 100k Servers, 1000s of Cloud Accounts, 2500 K8s Clusters, and Beyond

Read more
With the blistering adoption of the cloud, combined with increased complexity due to multi-hybrid and SaaS architecture, and the exploding use of containers, serverless and other forms of cloud-native architectures, we need new strategies for securing these complex multi and...
Container Security
Container Security
Container Security
January 10, 2023

The Importance of CNAPP in Cloud Security and Key Differences Between Platforms

Read more
We’re excited to announce a new integration with AWS Security Hub at the 2022 AWS:ReInvent conference.
Container Security
Container Security
Container Security
November 29, 2022

ThreatMapper Integrates with AWS Security Hub for Improved Security Observability

Read more
In this post, we will discuss using ThreatMapper to classify various cloud-native malware, the enhancements to the Yara rulesets to identify crypto signature malware risks, and prioritize those risks using runtime context to build a better security posture.
Container Security
Container Security
Container Security
December 8, 2022

Identification and Classification of Crypto-Malware Using ThreatMapper

Read more
As the new year begins, we wanted to highlight a few trends and predictions we believe will be relevant for organizations when it comes to cloud security initiatives, attacks, and compliance in 2023.
Security Observability
Security Observability
Security Observability
January 5, 2023

Looking Ahead: Cloud Security and Compliance Trends in 2023

Read more
Welcome to our first FAQ blog post where we recap popular questions we’ve received along with the answers to them.
Container Security
Container Security
Container Security
June 17, 2022

Deepfence FAQ – June 2022

Read more
There are two common approaches to security observability, vulnerability management, and workload protection: agent and agentless. We often hear from our customers and partners, “How do they compare? Which one does Deepfence use? Which way should I go?”
Container Security
Container Security
Container Security
April 12, 2022

Agent and Agentless: A Comprehensive Approach to Security

Read more
PacketStreamer has generated lots of buzz and garnered widespread support from the community. Today, we’d like to dive a bit deeper into some of the specific ways to use PacketStreamer.
Vulnerability Management
Vulnerability Management
Vulnerability Management
May 5, 2022

Network Traffic Observability: Three PacketStreamer Use Cases

Read more
PacketStreamer is an open source tool that captures network traffic from multiple remote sources concurrently and aggregates the data into a single pcap log file. It is written in golang and supports network capture from Kubernetes nodes, Docker hosts, and bare-metal/virtual-machine servers.
Vulnerability Management
Vulnerability Management
Vulnerability Management
April 2, 2022

Introducing PacketStreamer: Distributed Packet Capture for Cloud Native Platforms

Read more
According to Greek mythology, Zeus punished Sisyphus for cheating death (twice!) by forcing him to roll a boulder up a hill only for it to roll down each time it neared the top, repeating this action for eternity. The thought of this continuous, repetitious battle that Sisyphus waged against the weight of the boulder brings to mind the challenges facing today’s security teams.
Vulnerability Management
Vulnerability Management
Vulnerability Management
March 24, 2022

The Sisyphean Task of Vulnerability Management and How to Break Free

Read more
The log4j2 vulnerability like the OpenSSL Heartbleed and Apache Struts vulnerabilities that came before it are poignant reminders to digital businesses that it’s not just enough to respond to a vulnerability by redeploying applications once a patch is available, you also have to be able to discover instances of the vulnerability being exploited in real time in your production platform and stop them. In this tutorial, we’ll show you how to use Deepfence ThreatMapper and ThreatStryker to help you do just that.
Security Observability
Security Observability
Security Observability
January 10, 2022

How to Detect and Defeat the Log4j2 Vulnerability with Deepfence

Read more
The huge advances in ‘Shift Left’ processes makes it possible to deliver code to production that is secure and largely free from vulnerable dependencies. Among other things, these processes typically involve matching dependencies against public vulnerability lists from Mitre, Red Hat, Debian, and other projects.
Vulnerability Management
Vulnerability Management
Vulnerability Management
December 17, 2021

Visualize Attack Paths in Production Environments with ThreatMapper

Read more
The gravest cyber threat of modern times is upon us in the form of CVE-2021-44228. Here are some key resources.
Vulnerability Management
Vulnerability Management
Vulnerability Management
December 12, 2021

CVE-2021-44228: Log4j2 Exploitability & Attack Path Mitigation with ThreatMapper

Read more
Shift left, secure right. Shift left initiatives empower developers and DevOps teams to deliver secure code to production. Once code has been deployed, shift left steps back and ThreatMapper takes over. We recently announced that ThreatMapper is now 100% open source. In this blog post, we explain what ThreatMapper is and how to get started.
Kubernetes Security
Kubernetes Security
Kubernetes Security
November 11, 2021

ThreatMapper picks up where Shift Left ends

Read more
Modern cloud native applications are complex and have a lot of dependencies on external libraries including open source components with many known vulnerabilities. Managing and fixing a large number of vulnerabilities in multiple components is a tedious job. Adoption of containers, Kubernetes, and CI/CD based deployment models have further exacerbated the vulnerability management problem due to their rapid development and deployment cycles.
Vulnerability Management
Vulnerability Management
Vulnerability Management
June 16, 2020

Exploitability Vs Vulnerability — Leveraging Exploitability for Vulnerability Management

Read more