Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Comprehensive security throughout the entire lifecycle of containerized and serverless applications, spanning from the CI/CD pipeline to operational environments, is essential. Aqua can be deployed either on-premises or in the cloud, scaling to meet various needs. The goal is to proactively prevent security incidents and effectively address them when they occur. The Aqua Security Team Nautilus is dedicated to identifying emerging threats and attacks that focus on the cloud-native ecosystem. By investigating new cloud security challenges, we aim to develop innovative strategies and tools that empower organizations to thwart cloud-native attacks. Aqua safeguards applications from the development phase all the way to production, covering VMs, containers, and serverless workloads throughout the technology stack. With the integration of security automation, software can be released and updated at the rapid pace demanded by DevOps practices. Early detection of vulnerabilities and malware allows for swift remediation, ensuring that only secure artifacts advance through the CI/CD pipeline. Furthermore, protecting cloud-native applications involves reducing their potential attack surfaces and identifying vulnerabilities, embedded secrets, and other security concerns during the development process, ultimately fostering a more secure software deployment environment.

Description

Fidelis Halo, a SaaS-based cloud security platform, automates cloud computing security controls. It also provides compliance across containers, servers, and IaaS within any public, private or hybrid cloud environment. Halo's extensive automation capabilities allow for faster workflows between InfoSec (DevOps) and Halo with over 20,000 pre-configured policies and more than 150 policy templates. These templates cover standards like PCI, CIS and HIPAA. The comprehensive, bidirectional Halo API, SDK, and toolkit automate security and compliance controls in your DevOps toolchain. This allows you to identify and correct critical vulnerabilities before they go into production. Free Halo Cloud Secure edition includes full access to the Halo Cloud Secure CSPM Service for up to 10 cloud service account across any mix of AWS and Azure. Get started now to automate your cloud security journey!

API Access

Has API No 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Kubernetes Yes 
Apache Mesos No 
CardinalOps Yes 
CycloneDX Yes 
Docker No 
Google Kubernetes Engine (GKE) Yes 
Harbor Yes 
Jenkins No 
Microsoft Azure No 
OpenText Enterprise Security Manager No 
OpsMx Enterprise for Spinnaker Yes 
Ping Identity No 
Rezilion Yes 
Seemplicity Yes 
Splunk SOAR No 
Sumo Logic No 
TCS CHROMA Yes 
TCS OmniStore Yes 
TCS TAP Yes 
gopaddle Yes 

Integrations

Kubernetes Yes 
Apache Mesos Yes 
CardinalOps No 
CycloneDX No 
Docker Yes 
Google Kubernetes Engine (GKE) No 
Harbor No 
Jenkins Yes 
Microsoft Azure Yes 
OpenText Enterprise Security Manager Yes 
OpsMx Enterprise for Spinnaker No 
Ping Identity Yes 
Rezilion No 
Seemplicity No 
Splunk SOAR Yes 
Sumo Logic Yes 
TCS CHROMA No 
TCS OmniStore No 
TCS TAP No 
gopaddle No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

Free
Free full-featured Cloud Secure CSPM service for up to 10 IaaS accounts across any mix of supported cloud service providers. Includes one API key.

Free 15-day trial of the complete Halo platform and its add-on services for those considering Halo Essentials or Enterprise.
Free Trial Yes 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App Yes 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) Yes 
Online Support No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Aqua Security

Founded

2015

Country

United States

Website

aquasec.com

Vendor Details

Company Name

Fidelis Security

Founded

2002

Country

United States

Website

fidelissecurity.com/platforms/fidelis-halo/

Product Features

Application Performance Monitoring (APM)

Baseline Manager No 
Diagnostic Tools No 
Full Transaction Diagnostics No 
Performance Control No 
Resource Management No 
Root-Cause Diagnosis No 
Server Performance No 
Trace Individual Transactions No 

Cloud Security

Antivirus No 
Application Security No 
Behavioral Analytics No 
Encryption No 
Endpoint Management No 
Incident Management No 
Intrusion Detection System No 
Threat Intelligence No 
Two-Factor Authentication No 
Vulnerability Management No 

Cloud Workload Protection

Anomaly Detection No 
Asset Discovery No 
Cloud Gap Analysis No 
Cloud Registry No 
Data Loss Prevention (DLP) No 
Data Security No 
Governance No 
Logging & Reporting No 
Machine Learning No 
Security Audit No 
Workload Diversity No 

Container Security

Access Roles / Permissions No 
Application Performance Tracking No 
Centralized Policy Management No 
Container Stack Scanning No 
Image Vulnerability Detection No 
Reporting No 
Testing No 
View Container Metadata No 

Product Features

Application Security

Analytics / Reporting No 
Open Source Component Monitoring No 
Source Code Analysis No 
Third-Party Tools Integration Yes 
Training Resources No 
Vulnerability Detection Yes 
Vulnerability Remediation Yes 

Audit

Alerts / Notifications Yes 
Audit Planning No 
Compliance Management Yes 
Dashboard Yes 
Exceptions Management No 
Forms Management No 
Issue Management Yes 
Mobile Access No 
Multi-Year Planning No 
Risk Assessment No 
Workflow Management No 

Cloud Security

Antivirus No 
Application Security Yes 
Behavioral Analytics Yes 
Encryption No 
Endpoint Management No 
Incident Management No 
Intrusion Detection System Yes 
Threat Intelligence Yes 
Two-Factor Authentication Yes 
Vulnerability Management Yes 

Cloud Workload Protection

Anomaly Detection No 
Asset Discovery No 
Cloud Gap Analysis No 
Cloud Registry No 
Data Loss Prevention (DLP) No 
Data Security No 
Governance No 
Logging & Reporting No 
Machine Learning No 
Security Audit No 
Workload Diversity No 

Container Security

Access Roles / Permissions No 
Application Performance Tracking No 
Centralized Policy Management Yes 
Container Stack Scanning Yes 
Image Vulnerability Detection Yes 
Reporting No 
Testing No 
View Container Metadata Yes 

Vulnerability Management

Asset Discovery Yes 
Asset Tagging No 
Network Scanning Yes 
Patch Management No 
Policy Management Yes 
Prioritization Yes 
Risk Management No 
Vulnerability Assessment Yes 
Web Scanning No 

Alternatives

Lacework Reviews

Lacework

Fortinet

Alternatives

Runecast  Reviews

Runecast

Runecast Solutions
Invicti Web + API Reviews

Invicti Web + API

Invicti Security
DisruptOps Reviews

DisruptOps

FireMon