Semgrep
Static analysis that finds insecure code patterns in your repositories.
Security tooling on Kubernetes
The scanners from our pentests, running in your environment
We package the tools we use to find vulnerabilities as Helm charts and deploy them on your Kubernetes clusters, so your teams can find issues continuously, not just once a year.
Tools
What we deploy
Trivy
Scans container images, infrastructure-as-code and dependencies for known vulnerabilities and misconfigurations.
OWASP Dependency-Check
Software composition analysis that flags third-party libraries with known vulnerabilities.
ggshield
Detects secrets such as API keys and credentials committed to code.
Nikto
Scans web servers for dangerous files, outdated software and misconfigurations.
Tools from our pentests
Other open-source scanners we rely on in testing, selected for your stack.
How it works
Deployed your way
- Packaged as Helm charts for any conformant Kubernetes cluster, including Amazon EKS, Azure AKS, Google GKE and on-premises clusters
- Connected to your CI/CD pipeline so scans run on every change or on a schedule
- Results routed to the places your teams already work
- Configuration tuned to reduce noise and false positives
- Documentation and runbooks so your team can operate it
Bring continuous scanning in-house
Tell us about your clusters and pipelines, and we’ll plan the deployment.