Abstract illustration featuring a large hexagon with a snowflake design in the center. The background shows a gradient sky, and the text reads, Upwind: Streamline Container Runtime Security with CRI-O Support.

Streamline Container Runtime Security with CRI-O Support

Denise Ashur February 28, 2024

Streamline Container Runtime Security with CRI-O Support

We are excited to announce support for CRI-O (Container Runtime Interface – Orchestrator).

CRI-O is an implementation of the Kubernetes Container Runtime Interface (CRI) to enable using Open Container Initiative (OCI) compatible runtimes, making integration between Kubernetes and container runtimes lightweight & seamless.

Upwind’s eBPF sensor will now support CRI-O users, in addition to our existing support of other container runtimes such as Containerd and Docker.

cri-o-map-1-1024x622

“Upwind’s support of Cri-o makes it easy for us to ensure that we have full visibility of our container environments and can protect them in real time. Leveraging Upwind helped us strengthen our cloud security and gives us end-to-end protection of all of our running workloads.”

-Dr. Yehuda Elmaliah, Co-founder & CEO, Cogniteam


This new capability allows you to receive runtime insights and protections for CRI-O Kubernetes environments including:

Using this new capability from Upwind to receive runtime protections and insights for Kubernetes environments with CRI-O runtimes and strengthen your overall infrastructure security. 

Contents

Further Reading

behind-the-curtain-part-02

What’s Behind the Curtain? AWS Bedrock AgentCore Runtime Tear Down – Part II

Recap In Part I, we explored the AgentCore Runtime microVM from the inside and discovered we weren't alone - four platform binaries were running alongside our code, and one of them was quietly shipping logs to an AWS-internal S3 bucket. We left off with a question: what can we learn from these internal components, and…
behind-the-curtain-part-01

What’s Behind the Curtain? AWS Bedrock AgentCore Runtime Tear Down – Part I

Introduction When you deploy an AI agent to AWS Bedrock AgentCore Runtime, your code runs inside a Firecracker microVM - but it doesn't run alone. In this three-part series, we tear down the platform internals, document what we found, and assess how well the isolation holds up. Setting the Stage AWS Bedrock AgentCore Runtime is…
upwind-code

Upwind Code Expands Enterprise Coverage to Azure DevOps and Bitbucket Cloud

Modern development organizations rarely keep all their code in one place. Teams may use different version control platforms because of acquisitions, business-unit preferences, regional requirements, or existing development workflows. But when code is spread across multiple providers, application security coverage can become fragmented too. Today, Upwind Code adds support for Azure DevOps and Bitbucket Cloud.…
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS