deepfence/ThreatMapper

Features

• Attack Path Visualizations - Maps security vulnerabilities and network dependencies into a visual graph to identify high-risk attack paths.
• Vulnerability Detection - Identifies vulnerable software components and security misconfigurations in production workloads.
• ML-Based Flow Classifiers - Analyzes packet headers using machine learning to categorize and identify specific network communication patterns.
• ML-Based Classifiers - Categorizes network communication patterns by analyzing packet headers through machine learning models.
• Cloud-Native Application Protection Platforms - Provides a unified platform combining vulnerability scanning and threat detection to protect cloud workloads.
• Compliance Security Audits - Queries cloud provider APIs to audit infrastructure settings against industry security benchmarks.
• Runtime Threat Detection - Identifies security threats in real-time across cloud, serverless, and container platforms.
• Cloud Compliance Auditors - Evaluates cloud infrastructure against security benchmarks and industry standards to find configuration errors.
• Cloud Security Posture Scanners - Audits cloud configurations and resources against compliance benchmarks to identify security misconfigurations.
• Vulnerability Management Systems - Detects vulnerable software components and exposed secrets within production containers and file systems.
• Network Traffic Analysis - Collects and classifies network flows across distributed hosts to understand communication patterns.
• Network Traffic Dashboards - Visualizes network traffic flows and communication patterns between services using machine learning classification.
• Telemetry Collection - Gathers service discovery data, telemetry, and software dependencies from production platforms using agent-based and agent-less monitoring.
• Agent-Based Collectors - Provides lightweight distributed sensors to gather workload data and network packets across cloud environments.
• Telemetry Collectors - Gathers service discovery data and software dependencies from distributed hosts and clusters via agent-based monitoring.
• Azure Compliance Scanners - Evaluates Azure cloud resources against security controls and benchmarks to identify misconfigurations.
• Distributed Security Scanning Frameworks - Deploys containerized scanning components across diverse environments to detect vulnerabilities and secrets in production.
• Malware Scanning - Scans containers and file systems using predefined rule sets to identify known indicators of compromise.
• Secret Scanning - Locates unprotected tokens and authentication keys within containers and file systems.
• Pattern-Based Detection - Scans containers and file systems using pattern-matching rules to detect known indicators of malware.
• Packet Collection Systems - Gathers network traffic data from distributed hosts, cloud environments, and clusters using lightweight tools.
• Container Security - Runtime vulnerability scanner for Kubernetes and serverless.
• Security and Vulnerability Scanning - Runtime vulnerability scanning for containers and serverless environments.
• Defending - Listed in the “Defending” section of the Awesome K8s Security awesome list.
• Application Security - Identifies vulnerabilities in running container environments.
• Cloud Security - Runtime vulnerability and compliance scanner for cloud environments.
• Compliance and Monitoring - Hunts and ranks vulnerabilities in production environments.
• Container and Cluster Security - Production vulnerability scanner and attack path identification tool.
• Dependency Management - Runtime vulnerability scanner for containers and serverless environments.
• Security and Compliance - Runtime vulnerability scanner for containers and virtual machines.
• Sécurité et durcissement - Runtime vulnerability scanner for containerized environments.
• Testing Tools - Tool for mapping and scanning vulnerabilities in cloud-native environments.
• Vulnerability Scanning - Scans for vulnerabilities in runtime environments.

Historique des stars