News, news analysis, and commentary on the latest trends in cybersecurity technology.

Prelude Security Tackles Continuous Security Testing in Containers

Probes are tiny processes that run inside containers and scan applications for vulnerabilities.

Dark Reading Staff, Dark Reading

August 23, 2023

1 Min Read
two girls opening up a crate to look inside
Source: Panther Media GmbH via Alamy Stock Photo

Prelude Security has enhanced its Probes technology to help security teams run continuous security tests on all endpoints — including containers. Probes, which are tiny processes between 1KB and 2KB and don't require root permissions to execute, can be used to test inside the container to identify known vulnerabilities.

Containers bring benefits to the organization by helping IT teams and developers quickly and consistently deploy software across multiple environments, but securing them can be a challenge because many of the security tools are not designed to run in container environments. For many, container security relies on external scanning techniques, which may not be able to identify all possible issues, the company said. And application security standbys — such as penetration testing and offensive assessment — aren't typically performed on containers.

Containers are usually Internet-facing, which means security teams still need to know about vulnerabilities that may exist, as well as the likelihood of those issues being exploited. Prelude Security's Probes run inside the container as a process alongside the core application process and look for vulnerabilities. Probes also attempt to execute those vulnerabilities to determine whether they are exploitable.

Probes are free to use on up to 25 endpoints at a time and are available on a price-per-host basis, the company said. Probes can be installed using scripts or via a Docker extension, and a token system can be set up to address the fact that many containers are ephemeral.

About the Author(s)

Dark Reading Staff

Dark Reading

Dark Reading is a leading cybersecurity media site.

Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like

More Insights