Deepfence Blog

Launching ThreatMapper 1.4: A framework for defense against the evolving threat landscape – built by the community, for the community

Product Releases

Product Releases

Product Releases

Introducing the Shared Security Model for Cloud Native

We’re excited to announce a new integration with AWS Security Hub at the 2022 AWS:ReInvent conference.

Container Security

Container Security

Container Security

ThreatMapper Integrates with AWS Security Hub for Improved Security Observability

We’ve seen some tremendous momentum since our last open source community update and are excited to share our most recent milestones.

Deepfence Open Source Community Update – August 2022

Aya is a library that makes it possible to write eBPF programs fully in Rust and is focused on providing an experience that is as friendly as possible for developers. In this post we are going to explain what eBPF is, why Aya started, and what’s unique about it.

Kubernetes Security

Kubernetes Security

Kubernetes Security

Aya: your tRusty eBPF companion

We’re heading to Black Hat USA 2022, and if you are too – let’s meet! We’d love to show you the exciting new features in open source ThreatMapper and how Deepfence can protect your entire cloud native continuum of Kubernetes, clouds, containers, serverless, and more.

Deepfence at Black Hat 2022

Deepfence’s ThreatMapper has released an update that enables users to inventory cloud assets and check for compliance with standards supported by Steampipe. Open source users from both communities saw an opportunity to integrate compliance checks with threat mapping and security risk assessment. They contributed a core integration with Steampipe, and Deepfence added UI elements to help users prioritize remediation efforts.

Security Observability

Security Observability

Security Observability

ThreatMapper Integrates Steampipe to Enhance Security Observability

Deepfence YaraHunter scans container images, running Docker containers, and filesystems to find indicators of malware. It uses a YARA ruleset to identify resources that match known malware signatures, and may indicate that the container or filesystem has been compromised.

Multicloud Security

Multicloud Security

Multicloud Security

Introducing YaraHunter

Application security is a public good. Everyone benefits from building, operating, and using applications that are more secure. That principle led us to open source ThreatMapper in October 2021. Since the initial release, we’ve added many more capabilities to ThreatMapper, including the ability to find unprotected secrets, generate accurate SBOMs (Software Bills of Materials) from running applications, visualize attack paths from the attack surface through layers of proxies, enhanced vulnerability scans, and so much more.

Deepfence Open Source Community Update — April 2022

Recently I decided to leave my previous job of 5 years and take a new position as the Head of Strategic Solutions at Deepfence. I will be responsible for helping lead and scale their solution engineering and customer success functions and work closely with the ThreatMapper and ThreatStryker product communities to build the features the community is asking for.

Deepfence: 3 Reasons Why I am Excited about Building the Future of Cloud Native Security

We are pleased to announce the general availability of ThreatMapper 1.3.0!

ThreatMapper 1.3.0: Now with Secret Scanning, Runtime SBOMs, and More

We are pleased to announce the release of Deepfence ThreatMapper 1.2.0, which offers significant feature upgrades since the first open source release in October 2021.

Product Releases

Product Releases

Product Releases

New Release: Deepfence ThreatMapper 1.2.0 - Attack Path Visualization, AWS Fargate Support, and More