Deepfence Blog

Container Security
Container Security
Container Security
September 6, 2023

Navigating Threats at Runtime: Bridging Application Context with Risk Management through CNAPP

Read more
ThreatMapper provides unprecedented visibility across the entire cloud infrastructure so how can we scale for customers who need 100K Kubernetes nodes?
Serverless Security
Serverless Security
Serverless Security
June 1, 2023

Scaling ThreatMapper: Detecting Threats on 100k Servers, 1000s of Cloud Accounts, 2500 K8s Clusters, and Beyond

Read more
In a recent Deepfence webinar, "Demystifying Kubernetes Detection and Response," leading security luminaries from tech giants Google and Snap unraveled the intricacies of Kubernetes security.
Kubernetes Security
Kubernetes Security
Kubernetes Security
May 17, 2023

Beyond the Cloud: Kubernetes Security Insights from Google and Snap

Read more
We are thrilled to announce that eBPFGuard, our groundbreaking open-source Rust library, is becoming an integral part of our cutting-edge CNAPP
eBPF
eBPF
eBPF
May 11, 2023

Introducing eBPFGuard: A Library for Inline Mitigation of Threats using LSM Hooks

Read more
Case Study
Case Study
Case Study
March 24, 2023

The Power of Open-Source Security: A Deep Dive

Read more
As more organizations move to the cloud, there is a growing need for cloud security solutions that can keep up with the constantly evolving threat landscape.
Container Security
Container Security
Container Security
April 11, 2023

Why CNAPP is the Future of Cloud Protection

Read more
With the blistering adoption of the cloud, combined with increased complexity due to multi-hybrid and SaaS architecture, and the exploding use of containers, serverless and other forms of cloud-native architectures, we need new strategies for securing these complex multi and...
Container Security
Container Security
Container Security
January 10, 2023

The Importance of CNAPP in Cloud Security and Key Differences Between Platforms

Read more
We’re excited to announce a new integration with AWS Security Hub at the 2022 AWS:ReInvent conference.
Container Security
Container Security
Container Security
November 29, 2022

ThreatMapper Integrates with AWS Security Hub for Improved Security Observability

Read more
In this post, we will discuss using ThreatMapper to classify various cloud-native malware, the enhancements to the Yara rulesets to identify crypto signature malware risks, and prioritize those risks using runtime context to build a better security posture.
Container Security
Container Security
Container Security
December 8, 2022

Identification and Classification of Crypto-Malware Using ThreatMapper

Read more
Aya is a library that makes it possible to write eBPF programs fully in Rust and is focused on providing an experience that is as friendly as possible for developers. In this post we are going to explain what eBPF is, why Aya started, and what’s unique about it.
Kubernetes Security
Kubernetes Security
Kubernetes Security
July 22, 2022

Aya: your tRusty eBPF companion

Read more
Deepfence YaraHunter scans container images, running Docker containers, and filesystems to find indicators of malware. It uses a YARA ruleset to identify resources that match known malware signatures, and may indicate that the container or filesystem has been compromised.
Multicloud Security
Multicloud Security
Multicloud Security
July 7, 2022

Introducing YaraHunter

Read more
Welcome to our first FAQ blog post where we recap popular questions we’ve received along with the answers to them.
Container Security
Container Security
Container Security
June 17, 2022

Deepfence FAQ – June 2022

Read more
This year’s KubeCon + CloudNativeCon Europe was an incredible, electrifying event! We hope you had as much fun engaging with new people and ideas as we did. In this post, we’ll share what we heard at the conference, highlight some recent news, and tell you what events we’re going to next.
Events
Events
Events
May 24, 2022

What a Week! KubeCon + CloudNativeCon Europe 2022

Read more
There are two common approaches to security observability, vulnerability management, and workload protection: agent and agentless. We often hear from our customers and partners, “How do they compare? Which one does Deepfence use? Which way should I go?”
Container Security
Container Security
Container Security
April 12, 2022

Agent and Agentless: A Comprehensive Approach to Security

Read more
PacketStreamer is an open source tool that captures network traffic from multiple remote sources concurrently and aggregates the data into a single pcap log file. It is written in golang and supports network capture from Kubernetes nodes, Docker hosts, and bare-metal/virtual-machine servers.
Vulnerability Management
Vulnerability Management
Vulnerability Management
April 2, 2022

Introducing PacketStreamer: Distributed Packet Capture for Cloud Native Platforms

Read more
In our last few articles, we focused on vulnerability scanning of hosts and containers in AWS ECS, Azure AKS, Google GKE, and Oracle OKE. In this post, we will discuss secrets management, another important aspect of cloud native security. We are releasing an open source tool called SecretScanner to detect secrets automatically in container images, VMs, and hosts.
Container Security
Container Security
Container Security
February 4, 2021

Detecting Secrets to Reduce Attack Surface

Read more