Container Security

AccuKnox

Container Security

AccuKnox provides zero-trust runtime security for containers and Kubernetes using eBPF-powered monitoring and dynamic policy enforcement.

StackRox

Kubernetes Security

Red Hat-owned Kubernetes-native security platform for securing containerized apps across the full lifecycle.

Kubewarden

Security Policy Management

CNCF policy engine for Kubernetes using WebAssembly policies to enforce security and compliance rules.

Aqua Trivy

Vulnerability Scanning

Open-source vulnerability scanner from Aqua Security that finds CVEs in container images, IaC, and Git repositories.

Trivy

Container Security

Trivy by Aqua Security is an open-source comprehensive vulnerability scanner for containers, filesystems, Git repositories, and Kubernetes configurations.

Anchore

Container Security

Anchore provides container security and software supply chain compliance tools that help organizations enforce security policies for container images throughout the development pipeline.

GuardRails AppSec

Software

Application security platform scanning for vulnerabilities in code.

Kata Containers

Container Security

Open-source container runtime using lightweight VMs to provide hardware isolation for container workloads with OCI compatibility.

Podman

Container Orchestration

Daemonless container engine for developing and managing OCI containers and pods on Linux systems without requiring root privileges.

Edera

Container Security

Container isolation platform providing hardware-enforced security boundaries for Kubernetes workloads.

ControlPlane

Software

Kubernetes security consultancy and GitOps runtime with Kyverno policy tooling.

Wiz

Cloud Security

Wiz provides agentless cloud security including container vulnerability scanning, runtime protection, and Kubernetes security as part of its comprehensive CNAPP platform.

Wolfi Linux

Container Security

Chainguard's undistro Linux for secure software supply chain designed for containers with glibc and SBOM-first approach.

RapidFort

Attack Surface Management

Software attack surface management platform for container image hardening.

Spyderbat

Cloud-Native Application Protection

Runtime cloud-native security with attack tracing

KubeArmor

Kubernetes Security

Runtime security engine for Kubernetes workloads enforcing policies with Linux kernel primitives.

gVisor

Container Security

Google's user-space kernel providing an additional layer of isolation between containers and the host.

Tetragon

Kubernetes Security

Cilium's eBPF-based security observability and runtime enforcement platform for Kubernetes clusters.