Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Qualys Cloud Security offers a vulnerability analysis plug-in specifically designed for the CI/CD tool Jenkins, with plans to expand to additional platforms such as Bamboo, TeamCity, and CircleCI in the near future. Users can conveniently download these plug-ins straight from the container security module. This integration allows security teams to engage in the DevOps workflow, ensuring that vulnerable images are blocked from entering the system, while developers receive practical insights to address vulnerabilities effectively. It is possible to establish policies aimed at preventing the inclusion of vulnerable images in repositories, with settings adjustable based on factors like vulnerability severity and particular QIDs. The plug-in also provides an overview of the build, detailing vulnerabilities, information on software that can be patched, available fixed versions, and the specific image layers affected. Given that container infrastructure is inherently immutable, it is essential for containers to be consistent with the original images they are created from, thus necessitating rigorous security measures throughout the development lifecycle. By implementing these strategies, organizations can enhance their ability to maintain secure and compliant container environments.
Description
Red Hat® Quay is a container image registry that facilitates the storage, creation, distribution, and deployment of containers. It enhances the security of your image repositories through automation, authentication, and authorization mechanisms. Quay can be utilized within OpenShift or as an independent solution. You can manage access to the registry using a variety of identity and authentication providers, which also allows for team and organization mapping. A detailed permissions system aligns with your organizational hierarchy, ensuring appropriate access levels. Transport layer security encryption ensures secure communication between Quay.io and your servers automatically. Additionally, integrate vulnerability detection tools, such as Clair, to perform automatic scans of your container images, and receive notifications regarding any identified vulnerabilities. This setup helps optimize your continuous integration and continuous delivery (CI/CD) pipeline by utilizing build triggers, git hooks, and robot accounts. For further transparency, you can audit your CI pipeline by monitoring both API and user interface actions, thereby maintaining oversight of operations. In this way, Quay not only secures your container images but also streamlines your development processes.
API Access
Has API
Yes
API Access
Has API
Yes
Integrations
Kubernetes
Yes
Bamboo
Yes
BitSight
Yes
Compyl
Yes
CyberDNA Command and Control Center
Yes
Cyclops
Yes
Graylog
Yes
HivePro Uni5
Yes
Jenkins
Yes
KernelCare Enterprise
Yes
Integrations
Kubernetes
Yes
Bamboo
No
BitSight
No
Compyl
No
CyberDNA Command and Control Center
No
Cyclops
No
Graylog
No
HivePro Uni5
No
Jenkins
No
KernelCare Enterprise
No
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
Yes
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
Yes
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
No
In Person
Yes
Vendor Details
Company Name
Qualys
Founded
1999
Country
United States
Website
www.qualys.com/apps/container-security/
Vendor Details
Company Name
Red Hat
Founded
1993
Country
United States
Website
www.redhat.com/en/technologies/cloud-computing/quay
Product Features
Container Security
Access Roles / Permissions
No
Application Performance Tracking
No
Centralized Policy Management
No
Container Stack Scanning
No
Image Vulnerability Detection
No
Reporting
No
Testing
No
View Container Metadata
No