Runtime security

[v-ctiutiu]

Background

Ensuring supply chain security via a vulnerabilities scanning tool (i.e. Snyk) is the first step to ensure a more secure environment for every application. But, it deals only with static analysis of infrastructure manifests, Docker images, etc.

What about application runtime environment?

This the second most important part to ensure an even more secure environment for running applications. It deals with setting up and configuring a Kubernetes policy engine (e.g. Kyverno), application images signing, web application firewalls, etc.