Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Tetragon is an adaptable security observability and runtime enforcement tool designed for Kubernetes, leveraging eBPF to implement policies and filtering that minimize observation overhead while enabling the tracking of any process and real-time policy enforcement. With eBPF technology, Tetragon achieves profound observability with minimal performance impact, effectively reducing risks without the delays associated with user-space processing. Building on Cilium's architecture, Tetragon identifies workload identities, including namespace and pod metadata, offering capabilities that exceed conventional observability methods. It provides a selection of pre-defined policy libraries that facilitate quick deployment and enhance operational insights, streamlining both setup time and complexity when scaling. Furthermore, Tetragon actively prevents harmful actions at the kernel level, effectively closing off opportunities for exploitation while avoiding vulnerabilities related to TOCTOU attack vectors. The entire process of synchronous monitoring, filtering, and enforcement takes place within the kernel through the use of eBPF, ensuring a secure environment for workloads. This integrated approach not only enhances security but also optimizes performance across Kubernetes deployments.
Description
Ranging from basic embedded environmental sensors and LED wearables to advanced embedded controllers, smartwatches, and IoT wireless applications, this system incorporates configurable architecture-specific stack-overflow protection, kernel object and device driver permission tracking, and thread isolation enhanced by thread-level memory protection across x86, ARC, and ARM architectures, as well as userspace and memory domains. For systems lacking MMU/MPU and those limited by memory capacity, it enables the integration of application-specific code with a tailored kernel to form a monolithic image that can be loaded and run on the hardware of the system. In this setup, both the application and kernel code operate within a unified address space, facilitating efficient resource utilization and performance optimization. This design ensures that even resource-constrained environments can effectively leverage complex applications and functionalities.
API Access
Has API
API Access
Has API
Integrations
EEZ Studio
Elasticsearch
Endtest
Go
Golioth
Grafana Cloud
JSON
LVGL
OpsHub
Owlity
Integrations
EEZ Studio
Elasticsearch
Endtest
Go
Golioth
Grafana Cloud
JSON
LVGL
OpsHub
Owlity
Pricing Details
Free
Free Trial
Free Version
Pricing Details
No price information available.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
Tetragon
Founded
2017
Website
tetragon.io
Vendor Details
Company Name
Zephyr
Founded
2016
Website
docs.zephyrproject.org/latest/