Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Validate modifications across numerous supported resource types in all leading cloud service providers. Conduct scans of cloud resources during the build phase to identify misconfigured settings using a straightforward Python policy-as-code framework. Examine the connections between cloud resources through Checkov’s graph-oriented YAML policies. Run, test, and adjust runner parameters within the context of a specific repository's CI/CD processes and version control systems. Customize Checkov to create your own unique policies, providers, and suppression terms. Avoid the deployment of misconfigurations by integrating this process into the current workflows of developers. Facilitate automated annotations on pull or merge requests in your repositories, eliminating the need to establish a CI pipeline or perform routine checks. The Bridgecrew platform will automatically review new pull requests and provide comments highlighting any policy violations it uncovers, ensuring continuous compliance and security improvements in your cloud infrastructure. This proactive approach helps maintain best practices and enhances the overall security posture of your cloud environment.

Description

Kubernetes, cloud, and container security that closes loop from source to finish Find vulnerabilities and prioritize them; detect and respond appropriately to threats and anomalies; manage configurations, permissions and compliance. All activity across cloud, containers, and hosts can be viewed. Runtime intelligence can be used to prioritize security alerts, and eliminate guesswork. Guided remediation using a simple pull request at source can reduce time to resolution. Any activity in any app or service, by any user, across clouds, containers and hosts, can be viewed. Risk Spotlight can reduce vulnerability noise by up 95% with runtime context. ToDo allows you to prioritize the security issues that are most urgent. Map production misconfigurations and excessive privileges to infrastructure as code (IaC), manifest. A guided remediation workflow opens a pull request directly at source.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Kubernetes
Amazon Web Services (AWS)
Anitian FedRAMP Comprehensive
Archipelo
Azure Marketplace
Brainboard
Chainguard
Federator.ai
GitLab
HPE Ezmeral
IBM Cloud Pak for Watson AIOps
InsightFinder
Kondukto
Kustomize.io
Prometheus
Python
Stream Security
Tekton
Terraform
Visual Studio

Integrations

Kubernetes
Amazon Web Services (AWS)
Anitian FedRAMP Comprehensive
Archipelo
Azure Marketplace
Brainboard
Chainguard
Federator.ai
GitLab
HPE Ezmeral
IBM Cloud Pak for Watson AIOps
InsightFinder
Kondukto
Kustomize.io
Prometheus
Python
Stream Security
Tekton
Terraform
Visual Studio

Pricing Details

Free
Free Trial
Free Version

Pricing Details

No price information available.
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Prisma Cloud

Founded

2019

Country

United States

Website

www.checkov.io

Vendor Details

Company Name

Sysdig

Founded

2013

Country

United States

Website

sysdig.com/products/secure/

Product Features

Static Code Analysis

Analytics / Reporting
Code Standardization / Validation
Multiple Programming Language Support
Provides Recommendations
Standard Security/Industry Libraries
Vulnerability Management

Product Features

Cloud Security

Antivirus
Application Security
Behavioral Analytics
Encryption
Endpoint Management
Incident Management
Intrusion Detection System
Threat Intelligence
Two-Factor Authentication
Vulnerability Management

Cloud Workload Protection

Anomaly Detection
Asset Discovery
Cloud Gap Analysis
Cloud Registry
Data Loss Prevention (DLP)
Data Security
Governance
Logging & Reporting
Machine Learning
Security Audit
Workload Diversity

Container Security

Access Roles / Permissions
Application Performance Tracking
Centralized Policy Management
Container Stack Scanning
Image Vulnerability Detection
Reporting
Testing
View Container Metadata

IT Security

Anti Spam
Anti Virus
Email Attachment Protection
Event Tracking
IP Protection
Internet Usage Monitoring
Intrusion Detection System
Spyware Removal
Two-Factor Authentication
Vulnerability Scanning
Web Threat Management
Web Traffic Reporting

Vulnerability Management

Asset Discovery
Asset Tagging
Network Scanning
Patch Management
Policy Management
Prioritization
Risk Management
Vulnerability Assessment
Web Scanning

Vulnerability Scanners

Asset Discovery
Black Box Scanning
Compliance Monitoring
Continuous Monitoring
Defect Tracking
Interactive Scanning
Logging and Reporting
Network Mapping
Perimeter Scanning
Risk Analysis
Threat Intelligence
Web Inspection

Alternatives

Datree Reviews

Datree

Datree.io

Alternatives

Lacework Reviews

Lacework

Fortinet
Trivy Reviews

Trivy

Aqua Security
Aqua Reviews

Aqua

Aqua Security