Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Clair is an open-source initiative designed for the static analysis of security vulnerabilities within application containers, such as those used in OCI and Docker environments. Users interact with the Clair API to catalog their container images, allowing them to identify any potential vulnerabilities by comparing them to established databases. The primary aim of this project is to foster a clearer understanding of the security landscape surrounding container-based infrastructures. Reflecting this mission, the name Clair is derived from the French word that means clear, bright, or transparent. Within Clair, manifests serve as the framework for representing container images, and the project utilizes the content-addressable nature of OCI Manifests and Layers to minimize redundant processing efforts, thereby enhancing efficiency in vulnerability detection. By streamlining this analysis, Clair contributes significantly to the overall security of containerized applications.

Description

An open-source interface that ensures secure authentication, management, and auditing of non-human access across various tools, applications, containers, and cloud environments is essential for robust secrets management. These secrets are vital for accessing applications, critical infrastructure, and other sensitive information. Conjur enhances this security by implementing precise Role-Based Access Control (RBAC) to manage secrets tightly. When an application seeks access to a resource, Conjur first authenticates the application, then conducts an authorization assessment based on the established security policy, and subsequently delivers the necessary secret securely. The framework of Conjur is built on the principle of security policy as code, where security directives are documented in .yml files, integrated into source control, and uploaded to the Conjur server. This approach treats security policy with the same importance as other source control elements, fostering increased transparency and collaboration regarding the organization's security standards. Additionally, the ability to version control security policies allows for easier updates and reviews, ultimately enhancing the security posture of the entire organization.

API Access

Has API Yes 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

Docker Yes 
1Kosmos No 
Amazon Web Services (AWS) No 
Aquera No 
Cloud Foundry No 
Flexagon No 
Intellicta No 
OfficeSpace Software No 
Pentera No 
Qualys WAS No 
Red Hat OpenShift No 
SCADAfence No 
SQLXPress No 
Securonix Unified Defense SIEM No 
Sendmail No 
TCPWave No 
Terraform No 
ThreatAware No 
WatchTower Security Management App No 

Integrations

Docker Yes 
1Kosmos Yes 
Amazon Web Services (AWS) Yes 
Aquera Yes 
Cloud Foundry Yes 
Flexagon Yes 
Intellicta Yes 
OfficeSpace Software Yes 
Pentera Yes 
Qualys WAS Yes 
Red Hat OpenShift Yes 
SCADAfence Yes 
SQLXPress Yes 
Securonix Unified Defense SIEM Yes 
Sendmail Yes 
TCPWave Yes 
Terraform Yes 
ThreatAware Yes 
WatchTower Security Management App Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux Yes 
Chromebook No 

Deployment

Web-Based No 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Clair

Website

github.com/quay/clair

Vendor Details

Company Name

CyberArk

Founded

2013

Country

United States

Website

conjur.org

Product Features

Container Security

Access Roles / Permissions No 
Application Performance Tracking No 
Centralized Policy Management No 
Container Stack Scanning No 
Image Vulnerability Detection No 
Reporting No 
Testing No 
View Container Metadata No 

Static Code Analysis

Analytics / Reporting No 
Code Standardization / Validation No 
Multiple Programming Language Support No 
Provides Recommendations No 
Standard Security/Industry Libraries No 
Vulnerability Management No 

Product Features

Container Security

Access Roles / Permissions No 
Application Performance Tracking No 
Centralized Policy Management No 
Container Stack Scanning No 
Image Vulnerability Detection No 
Reporting No 
Testing No 
View Container Metadata No 

Privileged Access Management

Application Access Control No 
Behavioral Analytics No 
Credential Management No 
Endpoint Management No 
For MSPs No 
Granular Access Controls No 
Least Privilege No 
Multifactor Authentication No 
Password Management No 
Policy Management No 
Remote Access Management No 
Threat Intelligence No 
User Activity Monitoring No 

Alternatives

Trivy Reviews

Trivy

Aqua Security
HashiCorp Vault Reviews

HashiCorp Vault

HashiCorp
Red Hat Quay Reviews

Red Hat Quay

Red Hat
CLAIRE Reviews

CLAIRE

Informatica
RadiantOne Reviews

RadiantOne

Radiant Logic