Deepfence Blog

Here are some highlights from our most recent talk with Matt Lehman, Head of Security at Amazon Payments. Matt joined us on a fireside chat last week “Runtime Security Observability for Containerized Workloads in AWS” and we asked him ten key questions and took a deep dive into container security challenges.

Runtime Security Observability for Containerized Workloads in AWS

PacketStreamer has generated lots of buzz and garnered widespread support from the community. Today, we’d like to dive a bit deeper into some of the specific ways to use PacketStreamer.

Vulnerability Management

Vulnerability Management

Vulnerability Management

Network Traffic Observability: Three PacketStreamer Use Cases

You can use Deepfence ThreatMapper to visualize and scan unlimited number of hosts, containers, and pods at runtime as well as container images out of container registries, as part of CI/CD pipelines. In last few articles, we described how to install Deepfence community edition i.e. ThreatMapper on AWS ECS, Azure AKS, Google GKE, as well as Oracle OKE, and how to use it for vulnerability scanning of hosts and containers.

Use case — Runtime Threat Mapping for Bottlerocket containers using Deepfence ThreatMapper

In the last few posts, we described how to install the Deepfence community edition i.e., ThreatMapper, and use it for run-time threat mapping for containers and hosts. In this article, we will use ThreatMapper to scan Windows container images hosted on public or private container registries for vulnerabilities.

Threat Mapping for Windows Containers

Last month we had described how to install Deepfence community edition i.e. ThreatMapper on AWS ECS, and use it for vulnerability scanning of hosts and containers. Last week, we also removed all node and usage restrictions from Deepfence ThreatMapper; now you can visualize and scan unlimited number of hosts, containers and pods, at runtime as well as container images out of container registries, as a part of CI/CD pipelines.

Use case — Runtime Threat Mapping for AKS using Deepfence ThreatMapper

You can use Deepfence ThreatMapper to visualize and scan unlimited number of hosts, containers and pods at runtime as well as container images out of container registries, as part of CI/CD pipelines.

Use case — Runtime Threat Mapping for GKE using Deepfence ThreatMapper

Recently we released ThreatMapper, a subset of the Deepfence cloud native workload protection platform, completely free for community use with no upgrade obligations. This is not just another ordinary command line scanner! ThreatMapper is an enterprise grade feature set of our main product and comes with ready to use integrations for Slack, PagerDuty, Splunk, Sumo Logic, and more.

Use Case – Runtime Threat Mapping for Amazon ECS Using Deepfence ThreatMapper

Deepfence Enterprise already provides support for protecting your workloads running on serverless platforms like AWS Fargate. We now announce the same enterprise quality support for serverless deployments in our community edition, ThreatMapper. Using ThreatMapper, you can now seamlessly secure your serverless deployments just like you monitor and secure your normal VMs.

Serverless Security

Serverless Security

Serverless Security

Runtime Threat Mapping for AWS Fargate Serverless Deployments Using Deepfence