deepfence/ThreatMapper
ThreatMapper
ThreatMapper is a cloud native application protection platform and infrastructure security scanner. It functions as a vulnerability management system and cloud workload telemetry collector designed to monitor workloads and detect security risks across cloud and container environments.
The platform distinguishes itself through a network traffic visualizer that uses machine learning to classify communication patterns and a graph-based attack mapping system to identify high-risk paths between vulnerabilities and network dependencies.
Its broader capabilities cover cloud infrastructure compliance auditing against security benchmarks, production threat detection for malware and exposed secrets, and the collection of network packets and workload telemetry via distributed sensors.
Deployment of scanning components across cloud environments, clusters, and virtual machines is managed through container tools and infrastructure as code.
Features
- Attack Path Visualizations - Maps security vulnerabilities and network dependencies into a visual graph to identify high-risk attack paths.
- Vulnerability Detection - Identifies vulnerable software components and security misconfigurations in production workloads.
- ML-Based Flow Classifiers - Analyzes packet headers using machine learning to categorize and identify specific network communication patterns.
- ML-Based Classifiers - Categorizes network communication patterns by analyzing packet headers through machine learning models.
- Cloud-Native Application Protection Platforms - Provides a unified platform combining vulnerability scanning and threat detection to protect cloud workloads.
- Compliance Security Audits - Queries cloud provider APIs to audit infrastructure settings against industry security benchmarks.
- Runtime Threat Detection - Identifies security threats in real-time across cloud, serverless, and container platforms.
- Cloud Compliance Auditors - Evaluates cloud infrastructure against security benchmarks and industry standards to find configuration errors.
- Cloud Security Posture Scanners - Audits cloud configurations and resources against compliance benchmarks to identify security misconfigurations.
- Vulnerability Management Systems - Detects vulnerable software components and exposed secrets within production containers and file systems.
- Network Traffic Analysis - Collects and classifies network flows across distributed hosts to understand communication patterns.
- Network Traffic Dashboards - Visualizes network traffic flows and communication patterns between services using machine learning classification.
- Telemetry Collection - Gathers service discovery data, telemetry, and software dependencies from production platforms using agent-based and agent-less monitoring.
- Agent-Based Collectors - Provides lightweight distributed sensors to gather workload data and network packets across cloud environments.
- Telemetry Collectors - Gathers service discovery data and software dependencies from distributed hosts and clusters via agent-based monitoring.
- Azure Compliance Scanners - Evaluates Azure cloud resources against security controls and benchmarks to identify misconfigurations.
- Distributed Security Scanning Frameworks - Deploys containerized scanning components across diverse environments to detect vulnerabilities and secrets in production.
- Malware Scanning - Scans containers and file systems using predefined rule sets to identify known indicators of compromise.
- Secret Scanning - Locates unprotected tokens and authentication keys within containers and file systems.
- Pattern-Based Detection - Scans containers and file systems using pattern-matching rules to detect known indicators of malware.
- Packet Collection Systems - Gathers network traffic data from distributed hosts, cloud environments, and clusters using lightweight tools.
- Container Security - Runtime vulnerability scanner for Kubernetes and serverless.
- Security and Vulnerability Scanning - Runtime vulnerability scanning for containers and serverless environments.
- Defending - Listed in the “Defending” section of the Awesome K8s Security awesome list.
- Application Security - Identifies vulnerabilities in running container environments.
- Cloud Security - Runtime vulnerability and compliance scanner for cloud environments.
- Compliance and Monitoring - Hunts and ranks vulnerabilities in production environments.
- Container and Cluster Security - Production vulnerability scanner and attack path identification tool.
- Dependency Management - Runtime vulnerability scanner for containers and serverless environments.
- Security and Compliance - Runtime vulnerability scanner for containers and virtual machines.
- Sicherheit und Härtung - Runtime vulnerability scanner for containerized environments.
- Testing Tools - Tool for mapping and scanning vulnerabilities in cloud-native environments.
- Vulnerability Scanning - Scans for vulnerabilities in runtime environments.
