Container Security

Kubewarden

Kubernetes Security

CNCF policy engine for Kubernetes using WebAssembly policies to enforce security and compliance rules.

Aqua Trivy

Developer Experience Platforms

Open-source vulnerability scanner from Aqua Security that finds CVEs in container images, IaC, and Git repositories.

Trivy

Supply Chain Security

Trivy by Aqua Security is an open-source comprehensive vulnerability scanner for containers, filesystems, Git repositories, and Kubernetes configurations.

Anchore

Data Pipeline Orchestration

Anchore provides container security and software supply chain compliance tools that help organizations enforce security policies for container images throughout the development pipeline.

GuardRails AppSec

Code Security Scanning

Application security platform scanning for vulnerabilities in code.

Kata Containers

Cloud Workload Protection Platforms

Open-source container runtime using lightweight VMs to provide hardware isolation for container workloads with OCI compatibility.

Podman

Container Orchestration

Daemonless container engine for developing and managing OCI containers and pods on Linux systems without requiring root privileges.

AccuKnox

OT Security

AccuKnox provides zero-trust runtime security for containers and Kubernetes using eBPF-powered monitoring and dynamic policy enforcement.

Edera

Kubernetes Security

Container isolation platform providing hardware-enforced security boundaries for Kubernetes workloads.

ControlPlane

GitOps Platforms

Kubernetes security consultancy and GitOps runtime with Kyverno policy tooling.

Wiz

Cloud Hosting

Wiz provides agentless cloud security including container vulnerability scanning, runtime protection, and Kubernetes security as part of its comprehensive CNAPP platform.

Wolfi Linux

Cloud-Native Application Protection

Chainguard's undistro Linux for secure software supply chain designed for containers with glibc and SBOM-first approach.

RapidFort

Supply Chain Management

Software attack surface management platform for container image hardening.

Spyderbat

Cloud-Native Application Protection

Runtime cloud-native security with attack tracing

KubeArmor

Kubernetes Security

Runtime security engine for Kubernetes workloads enforcing policies with Linux kernel primitives.

StackRox

Kubernetes Security

Red Hat-owned Kubernetes-native security platform for securing containerized apps across the full lifecycle.

gVisor

Container Security

Google's user-space kernel providing an additional layer of isolation between containers and the host.

Tetragon

Kubernetes Security

Cilium's eBPF-based security observability and runtime enforcement platform for Kubernetes clusters.

NeuVector

Zero Trust Security

SUSE-owned open-source container security platform providing full lifecycle protection from vulnerability scanning to runtime detection and response.

Slim.AI

Container Security

Container optimization and security platform minimizing container attack surfaces by automatically removing unnecessary packages and vulnerabilities.