Latest release builds on current Kubernetes capabilities to enhance security, further deepening Aqua’s cross-platform support for cloud-native application security
Boston, MA – March 7, 2018 – Aqua Security, the market-leading platform provider for securing container-based and cloud-native applications, today announced the availability of version 3.0 of its platform featuring new security automation and controls for Kubernetes-based runtime environments. The new release also introduces more than 120 additional features, extending the capabilities of the company’s end-to-end container security platform to address the requirements of today’s multi-platform enterprise customers.
“Kubernetes adoption has been increasing along with the maturity and enterprise-readiness of its features” noted Liz Rice, Technology Evangelist at Aqua Security. “With the enterprise security skill shortage, enterprises are looking for ways to leverage Kubernetes to automate deployments and accelerate application delivery without compromising on security. That’s what Aqua 3.0 is all about”.
Aqua 3.0 builds on current Kubernetes security capabilities, introduced in versions 1.8 and 1.9, to provide automated Kubernetes-native controls in several key areas:
- Kubernetes-Native Role Based Access Controls: Aqua 3.0 enables customers to leverage Kubernetes webhook admission controller to create fine-grained user access control roles and policies, control access to kubectl commands, and assign them to specific services and nodes, or governed by Aqua’s scalable labeling scheme.
- Kubernetes-Native Image Assurance Controls: In addition to its ability to block unapproved images from running at the individual host level, Aqua can now prevent Kubernetes from running unapproved images across entire clusters, providing a more efficient mechanism that scales across large deployments.
- Kubernetes-Native Network Controls: Aqua’s container-level firewall now enables admins to control network traffic based on Kubernetes namespaces, clusters or deployments. This allows admins to enforce network segmentation for compliance purposes, as well as limit an attack’s “blast radius” across clusters and applications.
- CIS Kubernetes Benchmark: Building upon Aqua’s open-source Kube-Bench, the tool widely used by the community to validate the security posture of Kubernetes deployments, Aqua now incorporates CIS Kubernetes benchmark checks alongside updated Docker CIS benchmark checks. Automated checks can run daily, providing a detailed report that can also be exported for compliance.
- Auditing Kubernetes Events: Aqua’s event logging now includes Kubernetes-specific information, such as pod name, type, deployment and namespace data, providing additional visibility for compliance and forensics.
Aqua’s platform is currently in use by dozens of Global 1000 customers, providing the most comprehensive full-lifecycle solution for securing container-based and cloud-native applications, running on-prem or in the cloud, and supporting both Linux and Windows runtime environments, and a recently announced public beta for Pivotal Cloud Foundry. The Aqua platform drives DevSecOps automation, and provides visibility and security for runtime applications, including both host-level and network-level controls.
Aqua 3.0 is compatible with implementations of Kubernetes 1.8 or newer, and is available to existing Aqua customers. It is certified on popular Kubernetes-based deployments, including Google GKE, Azure AKS, Azure ACS, Amazon EKS, and RedHat Openshift, and is a Kubernetes Technology Partner. For additional information:
- Website page
- Webinar: Securing Enterprise Kubernetes 1.8-1.9 Deployments
Aqua 3.0 also introduces many other new features, including malware scanning for images and hosts, vulnerability scanning for hosts, and enhanced support for network overlays Flannel, Calico, Weave and Contiv. Additionally with version 3.0, Aqua unveils its patent-pending MicroEnforcer technology for securing “zero infrastructure” container-as-a-service offerings, including AWS Fargate and Azure Container Instances (ACI) – For more details, please see our companion announcement here.
About Aqua Security
Aqua Security enables enterprises to secure their container and cloud-native applications from development to production, accelerating application deployment and bridging the gap between DevOps and IT security. Aqua’s Container Security Platform provides full visibility into container activity, allowing organizations to detect and prevent suspicious activity and attacks in real time. Integrated with container lifecycle and orchestration tools, the Aqua platform provides transparent, automated security while helping to enforce policy and simplify regulatory compliance. Aqua was founded in 2015 and is backed by Lightspeed Venture Partners, Microsoft Ventures, TLV Partners, and IT security leaders, and is based in Israel and Boston, MA. For more information, visit www.aquasec.com or follow us on twitter.com/AquaSecTeam.