Security and Visibility for VMware Tanzu

Vulnerability management (container scanning and host scanning) tools

Automate CI/CD pipeline and registry (e.g., Harbor) scanning without images leaving your environment. Block vulnerabilities pre-production and monitor for new CVEs at runtime for containers and hosts.

Automatically prioritize vulnerabilities based on runtime context with Risk Spotlight. Map critical vulnerabilities back to an application and dev teams.

Runtime Security

Secure applications and infrastructure at runtime without impacting performance, leveraging Falco, the open-source, cloud native runtime security project. Implement real-time threat detection for Tanzu containers. Save time with out-of-the-box rules to detect anomalous behavior.

Network Security

Implement a Zero Trust approach to container security by allowing only required communication. Visualize network traffic between pods, services, and applications inside VMware Tanzu. Quickly identify anomalous network activity by auditing connections to or from any process.

Kubernetes & Container Monitoring

Maximize the performance and availability of your containers on VMware Tanzu. Get deep visibility into clusters, deployments, namespaces, pods, and workloads. Monitor Kubernetes orchestration state and operational status. Reduce cost by optimizing cloud capacity and resource usage.

Managed Enterprise Prometheus Monitoring

Scale with a managed, enterprise-grade Prometheus monitoring service that radically simplifies deployment and maintenance with long-term retention. Extend monitoring to hundreds of applications and services using Prometheus exporters and custom metrics.

Continuous Compliance

Continuously validate compliance with industry standards, like PCI and NIST, for Tanzu and containers during build and runtime. Automatically run benchmarks and measure progress against CIS best practices. Audit Kubernetes, container, and cloud activity. Enable File Integrity Monitoring (FIM) to detect data tampering.

Incident Response & Forensics

Understand and contain the impact of any security breach. Correlate system, user, and container activity over time with a forensics workflow. Conduct post-mortem analysis and determine root cause even after containers are gone. Accelerate incident response and recover quickly.

Troubleshooting

Reduce mean-time-to-resolution (MTTR) by examining granular, system-level capture data and detailed topology maps to resolve hard-to-diagnose issues. Get kernel-level observability to troubleshoot host, network, application, container, and process issues. Correlate Kubernetes and container events to see the entire picture.