Security operations provider Expel is releasing a new managed detection and response tool for Kubernetes designed to help organizations secure their business across their Kubernetes environment and adopt new technologies securely.
According to the company, organizations are adopting Kubernetes to help developers move fast and scale, like how organizations are migrating to the cloud. The container application market is growing due in large part to Kubernetes, so organization need fast, agile and light-weight application development. However, security risks can increase if security isn’t incorporated from the start.
Expel says its new managed detection and response (MDR) for Kubernetes is designed to help teams quickly detect and respond to security risks in their Kubernetes environments without slowing down DevOps, enabling organizations to focus more on business priorities.
According to Expel, the MDR for Kubernetes offering offers insights across three core layers of Kubernetes applications:
-
Configuration: To help organizations stay ahead of pervasive misconfigurations, Expel MDR for Kubernetes identifies cluster misconfigurations and references the Center for Information Security (CIS) Kubernetes benchmark for best practices to recommend configuration improvements—allowing security teams to proactively become more resilient against threats.
-
Control plane: Regardless of where a business is on its journey, Expel MDR for Kubernetes turns complexity into clarity. This offering integrates with Amazon Elastic Kubernetes Service (EKS) and Google Kubernetes Engine (GKE) infrastructure, analyzing Kubernetes audit logs, applying custom detection logic to alert on malicious or interesting activity, and providing clear, step-by-step remediation recommendations.
-
Run-time security: Expel uses a Bring-Your-Own-Tech (“BYO-Tech”) approach, so customers can maximize return on investment (ROI) with the solutions of their choice. Expel MDR for Kubernetes integrates with a portfolio of run-time container security vendors to get customers more value from the tech they already use.
The company says Expel MDR for Kubernetes also aligns with the MITRE ATT&CK framework, enabling teams to quickly remediate and create resilience for the future. Expel-written detections continuously learn and adapt based on activity in the environment, putting customers ahead of threats and equipping them with the answers and best-practices to track Kubernetes security posture over time.
If you enjoyed this article and want to receive more valuable industry content like this, click here to sign up for our digital newsletters!
Leave a Reply