Spyderbat

Spyderbat provides runtime security for cloud and Kubernetes environments. The company's platform monitors containerized application events from the Linux kernel to the cloud control plane, combining eBPF data with container runtime and Kubernetes context. The solution tracks application activity across multiple layers of the stack, including the Linux kernel, container runtime, Kubernetes orchestration, and cloud platforms. The platform's Behavioral Context Web uses cause-based tracing to create deterministic linkages between activities at various levels of the infrastructure stack, rather than relying on correlation or time-based associations. This approach enables the system to identify threats, risk, and anomalies in real time by tracking how attacks move across containers, Kubernetes clusters, and cloud control planes. Spyderbat's agent consumes less than 2% of runtime resources by offloading computationally intensive data processing. The platform provides automated security guardrails and can execute real-time blocking actions such as stopping individual processes, terminating Kubernetes pods, or applying virtual patches. The solution maintains trace state across ephemeral systems and can extend traces from milliseconds to months to provide root cause analysis without manual log correlation. The company was founded by Marc Willebeek-LeMair and Brian Smith, who previously founded TippingPoint and invented the Intrusion Prevention System category.