Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Public container registries are hosted out in the open, while many private registries operate from providers’ clouds. Mirantis Secure Registry works where you need it—including on your clusters themselves, putting you back in control.
Mirantis Secure Registry is an enterprise-grade container registry that can be easily integrated with standard Kubernetes distributions to provide the core of an effective secure software supply chain.
Role-based access control
Integrate with internal user directories to implement fine-grained access policies. Synchronize multiple repositories for separation of concerns from development through production.
Image scanning
Continuously scan images at the binary level and check against a regularly updated CVE vulnerability database.
Image signing
Developers and CI tools can digitally sign contents and publishers of images, so downstream users and automation tools can verify image authenticity before running.
Caching and mirroring
Mirror and cache container image repositories to avoid network bottlenecks and make images available across multiple sites for distributed teams and production environments.
Image lifecycle
Automatically clean up images based on policy controls.
Description
Qualys Cloud Security offers a vulnerability analysis plug-in specifically designed for the CI/CD tool Jenkins, with plans to expand to additional platforms such as Bamboo, TeamCity, and CircleCI in the near future. Users can conveniently download these plug-ins straight from the container security module. This integration allows security teams to engage in the DevOps workflow, ensuring that vulnerable images are blocked from entering the system, while developers receive practical insights to address vulnerabilities effectively. It is possible to establish policies aimed at preventing the inclusion of vulnerable images in repositories, with settings adjustable based on factors like vulnerability severity and particular QIDs. The plug-in also provides an overview of the build, detailing vulnerabilities, information on software that can be patched, available fixed versions, and the specific image layers affected. Given that container infrastructure is inherently immutable, it is essential for containers to be consistent with the original images they are created from, thus necessitating rigorous security measures throughout the development lifecycle. By implementing these strategies, organizations can enhance their ability to maintain secure and compliant container environments.
API Access
Has API
Yes
API Access
Has API
Yes
Integrations
Docker
Yes
Kubernetes
Yes
Akitra Andromeda
No
Bamboo
No
BitSight
No
C1Risk
No
CircleCI
No
Compyl
No
CyberDNA Command and Control Center
No
HivePro Uni5
No
Integrations
Docker
Yes
Kubernetes
Yes
Akitra Andromeda
Yes
Bamboo
Yes
BitSight
Yes
C1Risk
Yes
CircleCI
Yes
Compyl
Yes
CyberDNA Command and Control Center
Yes
HivePro Uni5
Yes
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Deployment
Web-Based
No
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
Yes
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
Yes
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
Yes
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Mirantis
Founded
1999
Country
United States
Website
www.mirantis.com/software/mirantis-secure-registry/
Vendor Details
Company Name
Qualys
Founded
1999
Country
United States
Website
www.qualys.com/apps/container-security/
Product Features
Product Features
Container Security
Access Roles / Permissions
No
Application Performance Tracking
No
Centralized Policy Management
No
Container Stack Scanning
No
Image Vulnerability Detection
No
Reporting
No
Testing
No
View Container Metadata
No