{"id":29293,"date":"2023-01-11T14:37:44","date_gmt":"2023-01-11T14:37:44","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2023\/01\/11\/armos-kubernetes-security-platform-kubescape-becomes-a-cncf-sandbox-project\/"},"modified":"2023-01-11T14:37:44","modified_gmt":"2023-01-11T14:37:44","slug":"armos-kubernetes-security-platform-kubescape-becomes-a-cncf-sandbox-project","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2023\/01\/11\/armos-kubernetes-security-platform-kubescape-becomes-a-cncf-sandbox-project\/","title":{"rendered":"Armo’s Kubernetes security platform Kubescape becomes a CNCF sandbox project"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

Cybersecurity startup Armo Ltd.<\/a> announced today that its open-source security software platform Kubescape<\/a> has been accepted by the Cloud Native Computing Foundation<\/a> as its latest sandbox project.<\/p>\n

The company also announced the official launch of the Armo Platform, which is an enterprise-grade version of Kubescape with premium features not available in the open-source version.<\/p>\n

The CNCF\u2019s backing is a big validation of the Kubescape platform, which helps protect Kubernetes environments from multiple kinds of cyberattacks. Kubernetes is an open-source container orchestration platform that\u2019s used to manage the components of modern applications. The software is widely used by enterprises, which is why Armo says it\u2019s in desperate need of a security boost.<\/p>\n

Kubescape provides that, offering the first open-source security platform for Kubernetes environments that works by scanning configuration files<\/a> such as YAML and Helm, as well as clusters and worker nodes, for misconfigurations and known vulnerabilities listed on the MITRE ATT&CK and other databases.<\/p>\n

After scanning a Kubernetes environment, Kubescape calculates a risk score and provides suggestions to users on any fixes that need to be made. In addition, the platform comes with a module for overseeing role-based access controls that visualizes the connection of roles and privileges in different parts of a Kubernetes cluster. It illustrates how these connections can fail and leave security holes, and shows how they can be fixed.<\/p>\n

Armo says the biggest benefit of Kubescape is that it\u2019s fully open-source. That\u2019s important, because the most popular Kubernetes security tools in use today are proprietary, closed-source platforms that are expensive for many organizations.<\/p>\n

With today\u2019s move, the responsibility for Kubescape\u2019s development has now been handed off to the CNCF, which will henceforth govern the project. Armo says it will still continue to work on Kubescape as its lead developer.<\/p>\n

\u201cArmo is a company committed to open source and dedicated to Kubernetes,\u201d said Armo Vice President of Open Source Craig Box. \u201cBringing Kubescape to the CNCF was an obvious choice. Kubescape helps tens of thousands of users secure their Kubernetes clusters and CI\/CD pipelines. As the first security scanner to become a CNCF project, we will strive to support and integrate with other CNCF projects, and look forward to building a wide contributor community.\u201d<\/p>\n

Although it\u2019s committed to open source, Armo still needs to make money, and to do that it has announced the launch of its Armo Platform, which brings additional features to Kubescape, including full enterprise-grade support and maintenance. The most significant difference between the two offerings is that the Armo Platform comes with a more fully-featured user interface and DevSecOps dashboard.<\/p>\n

It also offers pre-integrations with third-party DevOps tools and collaboration services such as Jira and Slack. In addition, Armo Platform can be deployed more easily on any Kubernetes platform, including cloud variants such as Amazon Web Services Inc.\u2019s Elastic Kubernetes Service, Microsoft Corp.\u2019s Azure Kubernetes Service, Google Cloud\u2019s Kubernetes Engine and Red Hat Inc.\u2019s OpenShift platform.<\/p>\n

The company reckons that customers are willing to pay for these extra features, counting more than 6,000 users of Armo Platform while in beta.<\/p>\n

\u201cArmo remains dedicated to making Kubescape the best open source Kubernetes security platform, and Armo Platform the best enterprise version for Kubescape,\u201d said co-founder and Chief Executive Shauli Rozen.<\/p>\n

Image: Armo<\/h5>\n
\n
\n

Show your support for our mission by joining our Cube Club and Cube Event Community of experts. Join the community that includes Amazon Web Services and Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger and many more luminaries and experts.<\/span><\/h3>\n<\/div><\/div>\n