Sysdig Secure
Sysdig Secure is a Cloud-Native Application Protection Platform (CNAPP) that provides security monitoring and protection for cloud environments, containers, and Kubernetes deployments. The platform integrates several key security functionalities: - Cloud Detection and Response (CDR) capabilities for identifying and responding to threats in cloud environments - Vulnerability management with runtime intelligence to reduce alert noise - Cloud Security Posture Management (CSPM) for risk assessment across cloud environments - Cloud Identity and Entitlement Management for visibility into cloud permissions - Container and Kubernetes security monitoring - Infrastructure as Code (IaC) security scanning The system utilizes runtime insights and a Cloud Attack Graph to: - Correlate security risks across multiple domains - Identify attack paths and potential lateral movement - Prioritize vulnerabilities based on actual usage and exposure - Monitor cloud workload behavior in real-time - Provide forensic investigation capabilities The platform supports multiple cloud environments and integrates with various cloud providers, offering centralized security management for multi-cloud deployments.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
Cloudmarker is a configurable cloud monitoring tool and framework that audits Azure and GCP environments by retrieving, analyzing, and alerting on cloud security data.
A framework for analyzing container images, running scripts inside containers, and gathering information for static analysis and policy enforcement.
KICS is an open-source Infrastructure as Code security scanner that detects vulnerabilities and misconfigurations through customizable queries and integrates with CI/CD pipelines.
S3Scanner is an open-source tool that scans S3 buckets across S3-compatible APIs to identify misconfigurations and security vulnerabilities.
A search engine for open Amazon S3 buckets and their contents, allowing users to search for files using keywords, filename extensions, and full path.
A community-driven repository of pre-built security analytics queries and rules for monitoring and detecting threats in Google Cloud environments across various log sources and activity types.
Kube-bench is a security assessment tool that validates Kubernetes deployments against CIS Kubernetes Benchmark standards through automated configuration checks.
A deprecated Kubernetes workload policy enforcement tool that helped secure multi-tenant clusters through various security policies and configurations.
PINNED
Proton Pass is a cross-platform password manager that provides encrypted storage, password generation, and security monitoring features with integrated 2FA and dark web monitoring capabilities.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.