Category
Platform security
The factory that ships the workload. Admission, runtime, and the plan. Cloud is the account. Application Security is the code. Open a shortlist for the buy you are making.
Shortlists
Kubernetes security
We split Kubernetes tools by gating the cluster you operate. A dashboard warning is not admission.
ShortlistsIaC scanners
We split IaC scanners by failing the plan before it lands. The cloud account graph is Cloud.
Container security toolsImage scan, admission signing, and runtime defense.More categories
Questions about Platform security
Does a scanner replace admission?
No. A scan warns. Admission rejects.
Is this the cloud platforms list?
No. That page is the account CNAPP. This pillar is the cluster you operate.
Where do CI secrets sit?
The scan of a leaked key is Application Security. The vault is Identity.
