Latest release of Aqua’s leading container security platform also features new capabilities that strengthen compliance and image assurance
Tel Aviv, Israel and Copenhagen, Denmark – 17 October 2017 – Aqua Security, the market-leading container security platform provider, today announced version 2.6 of its solution, featuring general availability of runtime security for Windows Containers and a slew of additional features detailed below. The Aqua team is at DockerCon EU in Copenhagen this week, where it will be showing its latest software at booth #G10.
The Aqua Container Security Platform (CSP) delivers comprehensive, single-pane-of-glass security for containerized applications regardless of orchestration, cloud or virtualization environments. In addition to Linux-based containers, Aqua now features production-ready security for Windows Containers-based applications, which are already being used in production by Aqua customers.
Aqua’s Windows Containers solution enables organizations to secure their image development pipeline, ensure that only trusted images can be deployed, and enforce runtime controls that include detection and blocking of suspicious activities, nano-segmentation of container app networking, and secure delivery of secrets to containers with no downtime.
“Windows Server containers are becoming a key enabler for customers building new cloud applications as well as breathing new life into their existing applications. With Aqua’s support for Windows Server containers these customers gain a great and simple option for security, monitoring and auditing,” said Nir Ben Zvi, Principal Program Manager, Windows Server Security.
Aqua CSP 2.6 additionally includes more than 40 customer-requested features, among them:
- Pipeline-Driven Image Assurance Policies: Using a single, centralized console, Admins can now assign different image assurance policies and controls by pipeline, allowing to differentiate risk profiles and security controls between applications, development stages, and production, or compliance and trust levels.
- SCAP support: Aqua 2.6 supports the Security Content Automation Protocol (SCAP) to allow custom security and compliance checks on images. SCAP scripts can be uploaded and treated as pass/fail tests for image approval, which effectively automates compliance checks into the CI/CD process.
- Fine-Grained Auditing for Compliance: Admins can now selectively turn on fine-grained auditing for processes, which allows recording of extended information about the process, like the command arguments and md5 signature.
- Enhanced Machine Learning Controls: Extends Aqua’s machine learning algorithms to allow automatic profiling of Linux and Windows application activity and create runtime security policies. Aqua 2.6 shows a 50% improvement in the time it takes to automatically learn a web application.
“As enterprise use of containers continues to mature, the real needs of enterprises for native container application security emerge,“ said Amir Jerbi, CTO and co-founder of Aqua Security. “With Aqua 2.6 we continue to commit to our ‘secure once, run anywhere’ objective, adding production-ready support for Windows containers, in addition to our support for Linux containers and all major orchestrator stacks.””
The Aqua team is at DockerCon EU in Copenhagen this week, and will be featured in several sessions:
- What Have Syscalls Done For You Lately? – Liz Rice, Technology Evangelist at Aqua, Black Belt session – Auditorium 10, Tuesday, 17 Oct. at 11:15AM
- Modern App Security Requires Containers – Panel discussion featuring Liz Rice – Auditorium 10, Tuesday, 17 Oct. at 5:10PM
- The Equifax Breach – Contained by Containers – Benjy Portnoy, Director of DevSecOps at Aqua, Ecosystem session – Auditorium 12, Wednesday, 18 Oct. at 1:50PM
DockerCon EU attendees are invited to attend the sessions and learn more about Aqua 2.6 at booth #G10 at the expo hall.
About Aqua Security
Aqua Security enables enterprises to secure their container-based applications from development to production, accelerating container adoption and bridging the gap between DevOps and IT security. Integrated with container lifecycle and orchestration tools, the Aqua platform provides transparent, automated security while helping to enforce policy and simplify regulatory compliance. Aqua was founded in 2015 and is backed by Lightspeed Venture Partners, Microsoft Ventures, TLV Partners and IT security leaders, and is based in Israel and San Francisco, CA. For more information, visit www.aquasec.com or follow us on twitter.com/AquaSecTeam.