Pinpoint Vulnerability Origins With Complete Visibility into Container Image Layers

Feb 21, 2024

We are excited to release an important new capability – container image layer visibility.

A Docker build consists of a series of ordered build instructions. A layer, or image layer, is a change in an image, or an intermediate image. Every command specified (FROM, RUN, COPY, etc.) in a Dockerfile causes the previous image to change, thus creating a new layer.

This new capability provides a detailed breakdown of each container image by:

Highlighting specific image layers
Identifying image changes between layers
Pinpointing the introduction layer for every package

Understanding and tracking container image layers is crucial for identifying when and where vulnerabilities were first introduced and can also be used to discover package drifts related to packages installed outside the base image layer.

In addition to layer visibility and the ability to pinpoint vulnerabilities origins, you can also use this capability for:

1. Streamlined scans of large images, leveraging our ability to break the scan per layer

2. More efficient scans that only scan the last layer

3. Faster and easier scanning for your organization

Use this capability for increased transparency into your running container images, helping you rapidly identify and track how image layers introduce or resolve vulnerabilities and how this impacts your overall cloud security.

Product

Secure Google Cloud Identities with Upwind’s Human Identity Management

Jul 25, 2024

Upwind’s support for Human Identity Management in Google Cloud gives you the ability to easily surface, understand and fix risky misconfigurations including over-privileged or excessive permissions, ensuring a more secure Google Cloud environment. Managing human identities in the cloud can be incredibly challenging for organizations, especially when they use multiple cloud providers or different identity […]

Product

How Organizations Use Upwind’s File-Based Threat Monitoring

By Denise Ashur

Jul 18, 2024

Upwind’s threat detection capabilities give you real-time protection against cloud attacks, including malicious file activities. Upwind’s lightweight, high-performance eBPF sensor goes beyond monitoring file activities to enrich that data with information about an event’s context and provide insights into the actions taken on the file, including read, write, and truncate (delete). You can leverage this […]

Product

Monitor & Secure Cross-Account Roles with Upwind’s Non-Human Identity Security (NHI)

By Denise Ashur

Jul 10, 2024

Upwind’s Non-Human Identity (NHI) Security streamlines your identity management and gives you the ability to easily view cross-account roles and their associated permissions. Cross-account roles are incredibly useful for organizations with multiple AWS accounts and permissions, but they can also be difficult to monitor and secure. Upwind helps solve this problem by providing increased visibility […]