deepfence/ThreatMapper
ThreatMapper
ThreatMapper es una plataforma de protección de aplicaciones nativas de la nube y escáner de seguridad de infraestructura. Funciona como un sistema de gestión de vulnerabilidades y recolector de telemetría de cargas de trabajo en la nube diseñado para monitorear cargas de trabajo y detectar riesgos de seguridad en entornos de nube y contenedores.
La plataforma se distingue por un visualizador de tráfico de red que utiliza aprendizaje automático para clasificar patrones de comunicación y un sistema de mapeo de ataques basado en grafos para identificar rutas de alto riesgo entre vulnerabilidades y dependencias de red.
Sus capacidades más amplias cubren la auditoría de cumplimiento de infraestructura en la nube frente a benchmarks de seguridad, detección de amenazas en producción para malware y secretos expuestos, y la recolección de paquetes de red y telemetría de cargas de trabajo a través de sensores distribuidos.
El despliegue de componentes de escaneo a través de entornos de nube, clústeres y máquinas virtuales se gestiona mediante herramientas de contenedores e infraestructura como código.
Features
- Attack Path Visualizations - Maps security vulnerabilities and network dependencies into a visual graph to identify high-risk attack paths.
- Vulnerability Detection - Identifies vulnerable software components and security misconfigurations in production workloads.
- ML-Based Flow Classifiers - Analyzes packet headers using machine learning to categorize and identify specific network communication patterns.
- ML-Based Classifiers - Categorizes network communication patterns by analyzing packet headers through machine learning models.
- Cloud-Native Application Protection Platforms - Provides a unified platform combining vulnerability scanning and threat detection to protect cloud workloads.
- Compliance Security Audits - Queries cloud provider APIs to audit infrastructure settings against industry security benchmarks.
- Runtime Threat Detection - Identifies security threats in real-time across cloud, serverless, and container platforms.
- Cloud Compliance Auditors - Evaluates cloud infrastructure against security benchmarks and industry standards to find configuration errors.
- Cloud Security Posture Scanners - Audits cloud configurations and resources against compliance benchmarks to identify security misconfigurations.
- Vulnerability Management Systems - Detects vulnerable software components and exposed secrets within production containers and file systems.
- Network Traffic Analysis - Collects and classifies network flows across distributed hosts to understand communication patterns.
- Network Traffic Dashboards - Visualizes network traffic flows and communication patterns between services using machine learning classification.
- Telemetry Collection - Gathers service discovery data, telemetry, and software dependencies from production platforms using agent-based and agent-less monitoring.
- Agent-Based Collectors - Provides lightweight distributed sensors to gather workload data and network packets across cloud environments.
- Telemetry Collectors - Gathers service discovery data and software dependencies from distributed hosts and clusters via agent-based monitoring.
- Azure Compliance Scanners - Evaluates Azure cloud resources against security controls and benchmarks to identify misconfigurations.
- Distributed Security Scanning Frameworks - Deploys containerized scanning components across diverse environments to detect vulnerabilities and secrets in production.
- Malware Scanning - Scans containers and file systems using predefined rule sets to identify known indicators of compromise.
- Secret Scanning - Locates unprotected tokens and authentication keys within containers and file systems.
- Pattern-Based Detection - Scans containers and file systems using pattern-matching rules to detect known indicators of malware.
- Packet Collection Systems - Gathers network traffic data from distributed hosts, cloud environments, and clusters using lightweight tools.
- Container Security - Runtime vulnerability scanner for Kubernetes and serverless.
- Security and Vulnerability Scanning - Runtime vulnerability scanning for containers and serverless environments.
- Defending - Listed in the “Defending” section of the Awesome K8s Security awesome list.
- Application Security - Identifies vulnerabilities in running container environments.
- Cloud Security - Runtime vulnerability and compliance scanner for cloud environments.
- Compliance and Monitoring - Hunts and ranks vulnerabilities in production environments.
- Container and Cluster Security - Production vulnerability scanner and attack path identification tool.
- Dependency Management - Runtime vulnerability scanner for containers and serverless environments.
- Security and Compliance - Runtime vulnerability scanner for containers and virtual machines.
- Seguridad y endurecimiento - Runtime vulnerability scanner for containerized environments.
- Testing Tools - Tool for mapping and scanning vulnerabilities in cloud-native environments.
- Vulnerability Scanning - Scans for vulnerabilities in runtime environments.
