Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Kubernetes is an open-source platform that provides developers and DevOps with an end-to-end security solution. This includes security compliance, risk analysis, security compliance and RBAC visualizer. It also scans images for vulnerabilities. Kubescape scans K8s clusters, Kubernetes manifest files (YAML files, and HELM charts), code repositories, container registries and images, detecting misconfigurations according to multiple frameworks (such as the NSA-CISA, MITRE ATT&CK®), finding software vulnerabilities, and showing RBAC (role-based-access-control) violations at early stages of the CI/CD pipeline. It instantly calculates risk scores and displays risk trends over time. Kubescape is one of the most popular Kubernetes security compliance tools for developers. Its easy-to-use interface, flexible output formats and automated scanning capabilities have made Kubescape one of the fastest growing Kubernetes tools. This has saved Kubernetes admins and users precious time, effort and resources.

Description

Qualys Cloud Security offers a vulnerability analysis plug-in specifically designed for the CI/CD tool Jenkins, with plans to expand to additional platforms such as Bamboo, TeamCity, and CircleCI in the near future. Users can conveniently download these plug-ins straight from the container security module. This integration allows security teams to engage in the DevOps workflow, ensuring that vulnerable images are blocked from entering the system, while developers receive practical insights to address vulnerabilities effectively. It is possible to establish policies aimed at preventing the inclusion of vulnerable images in repositories, with settings adjustable based on factors like vulnerability severity and particular QIDs. The plug-in also provides an overview of the build, detailing vulnerabilities, information on software that can be patched, available fixed versions, and the specific image layers affected. Given that container infrastructure is inherently immutable, it is essential for containers to be consistent with the original images they are created from, thus necessitating rigorous security measures throughout the development lifecycle. By implementing these strategies, organizations can enhance their ability to maintain secure and compliant container environments.

API Access

Has API No 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

CircleCI Yes 
Jenkins Yes 
Kubernetes Yes 
ARMO Yes 
Akitra Andromeda No 
Amazon Web Services (AWS) Yes 
Bamboo No 
C1Risk No 
Complyance No 
Cyclops No 
GitHub Yes 
Kroll Cyber Risk No 
Polarity No 
Refold No 
Resmo No 
Splunk Cloud Platform No 
Stream Security No 
ThreatAdvisor No 
anecdotes No 
appNovi No 

Integrations

CircleCI Yes 
Jenkins Yes 
Kubernetes Yes 
ARMO No 
Akitra Andromeda Yes 
Amazon Web Services (AWS) No 
Bamboo Yes 
C1Risk Yes 
Complyance Yes 
Cyclops Yes 
GitHub No 
Kroll Cyber Risk Yes 
Polarity Yes 
Refold Yes 
Resmo Yes 
Splunk Cloud Platform Yes 
Stream Security Yes 
ThreatAdvisor Yes 
anecdotes Yes 
appNovi Yes 

Pricing Details

$0/month
Free Trial Yes 
Free Version Yes 

Pricing Details

No price information available.
Free Trial Yes 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac Yes 
Linux Yes 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux Yes 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) Yes 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Armo

Founded

2019

Country

Israel

Website

www.armosec.io/kubescape/

Vendor Details

Company Name

Qualys

Founded

1999

Country

United States

Website

www.qualys.com/apps/container-security/

Product Features

Container Security

Access Roles / Permissions Yes 
Application Performance Tracking No 
Centralized Policy Management No 
Container Stack Scanning Yes 
Image Vulnerability Detection Yes 
Reporting Yes 
Testing No 
View Container Metadata No 

Product Features

Container Security

Access Roles / Permissions No 
Application Performance Tracking No 
Centralized Policy Management No 
Container Stack Scanning No 
Image Vulnerability Detection No 
Reporting No 
Testing No 
View Container Metadata No 

Alternatives

KubeArmor Reviews

KubeArmor

AccuKnox

Alternatives

Aqua Reviews

Aqua

Aqua Security