NeuVector Releases New Vulnerability Management Tools
April 14, 2020

NeuVector announced the NeuVector platform includes new features – purpose-built for enterprise DevOpps and security teams – focused on automated end-to-end vulnerabilitty management and protection, expanded registry scanning, and host protection in production environments.

The platform additions include the new Vulnerability and Compliance Explorer for quickly investigating, prioritizing, reporting, and mitigating potentially damaging vulnerability and compliance issues. High performance large-registry scanning and enhanced host (node) security processes have also been added.

NeuVector's new Vulnerability and Compliance Explorer enables DevOps and security teams to:

- Assess the current state of container security by identifying assets, scanning registries, and receiving comprehensive reports.

- Prioritize which images, nodes, or containers are most in need of attention.

- Respond to and mitigate any areas with security and compliance risk.

- Improve ongoing security procedures (and rescan to confirm improvements).

Importantly, the Explorer adds virtual patching as part of its response mechanism. This critical security feature gives DevOps teams the ability to virtually patch vulnerabilities in production containers or hosts without needing to actually patch or remediate that vulnerability in a library or package. Doing so gives enterprises confidence deploying containers in production environments that have vulnerabilities without a current fix available. NeuVector is able to do this by whitelisting all authorized application container behavior – such as network connections, processes, and file activity – either through NeuVector's behavioral learning processes or automatically via security policy as code. Any attempted exploit on a workload or host protected by NeuVector is then detected, alerted, and blocked (depending on user settings). In addition to virtually patching vulnerabilities, these same run-time security capabilities also protect enterprises against embedded malware, zero-day attacks, and insider or phishing attacks.

The platform release also introduces high performance scanning for images in large registries. DevOps teams can deploy additional scanners to run in parallel, quickly scanning registries with thousands or even tens of thousands of images. This new capability builds on NeuVector's market-leading scanner performance that easily handles enterprise requirements.

Additionally, the release strengthens host (node) protection in production environments. Now, just as NeuVector automatically baselines and whitelists container processes to detect suspicious activity, host processes are baselined and hosts can be put into an alert-or-block mode. This enhances existing host protections that include detecting privilege escalations as well as known suspicious processes (such as reverse shells, port scanning, and tunnels). Hosts are automatically scanned for vulnerabilities and run Docker and Kubernetes standards-based or customized compliance checks.

"Today's additions to the NeuVector platform make it even easier for DevOps and security teams to achieve end-to-end vulnerability insight and protection – helping them get in front of any issues and ensure their security compliance," said Gary Duan, CTO, NeuVector. "Alongside our new high-performance parallel scanning and reinforced host process protections, we're proud to make these key platform additions available to our customers. There's no easier or more thorough way to automate container security across the entire lifecycle."

Share this

Industry News

September 17, 2020

env0, a developer of Infrastructure-as-Code (IaC) management software, announced the availability of its new open source solution for Terraform users, Terratag.

September 17, 2020

Push Technology announced a partnership with Innova Solutions, an ACS Solutions company, specializing in global information technology services.

September 17, 2020

Alcide achieved the AWS Outposts Ready designation, part of the Amazon Web Services (AWS) Service Ready Program.

September 16, 2020

Portshift announced serverless container security support for AWS Fargate.

September 16, 2020

Sonatype and NeuVector announced a new integration that provides a comprehensive view of all Kubernetes and Container open source risk in one place.

September 16, 2020

Pure Storage entered into a definitive agreement to acquire Portworx, a Kubernetes data services platform enterprises trust to run mission-critical applications in containers in production.

September 15, 2020

OutSystems announced a series of new tools and capabilities that will empower organizations of all sizes to build applications quickly, build them right, and build them for the future.

September 15, 2020

VMware unveiled new offerings to help customers further accelerate their app and infrastructure modernization initiatives. VMware vSphere 7 Update 1, VMware vSAN 7 Update 1 and VMware Cloud Foundation 4.1 product releases streamline customer adoption of Kubernetes and support stateful applications with new developer-ready capabilities and enhance scalability and operations with new features.

September 15, 2020

Oracle announced the general availability of Java 15 (Oracle JDK 15).

September 14, 2020

Actifio announced a global alliance with Persistent Systems, a global solutions company with deep technology expertise, to help enterprises with data stack modernization and acceleration of digital transformation initiatives.

September 14, 2020

Perforce Software announced the release of the Helix TeamHub Command-Line Client (hth-cli).

September 14, 2020

StackRox secured an additional $26.5 million in funding.

September 10, 2020

JourneyApps announced the official launch of its OXIDE Integrated Development Environment (IDE) which ushers in a new paradigm of building, deploying and managing secure and powerful business applications.

September 10, 2020

Solo.io announced the WebAssembly OCI Image Specification, which defines a standard format for bundling and storing a Wasm module and its metadata as an OCI (Open Container Initiative) image in order to facilitate interoperability across different solutions.

September 10, 2020

Flexential announced new dedicated Hosted Private Cloud - vCenter Access capabilities that enable organizations to use industry-leading third-party tools to manage workloads and data protection requirements on a single, consolidated cloud platform.