Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Clair is an open-source initiative designed for the static analysis of security vulnerabilities within application containers, such as those used in OCI and Docker environments. Users interact with the Clair API to catalog their container images, allowing them to identify any potential vulnerabilities by comparing them to established databases. The primary aim of this project is to foster a clearer understanding of the security landscape surrounding container-based infrastructures. Reflecting this mission, the name Clair is derived from the French word that means clear, bright, or transparent. Within Clair, manifests serve as the framework for representing container images, and the project utilizes the content-addressable nature of OCI Manifests and Layers to minimize redundant processing efforts, thereby enhancing efficiency in vulnerability detection. By streamlining this analysis, Clair contributes significantly to the overall security of containerized applications.
Description
Comprehensive protection, oversight, and micro-segmentation of workloads are essential for private cloud and on-premises data center settings. This includes fortifying security and providing monitoring capabilities specifically designed for private cloud infrastructures and physical data centers, along with support for Docker containerization. Utilizing agentless protection for Docker containers allows for extensive application control paired with streamlined management. To defend against zero-day vulnerabilities, implementing application whitelisting, detailed intrusion prevention measures, and real-time file integrity monitoring (RT-FIM) is crucial. Additionally, ensuring the security of OpenStack deployments requires thorough hardening of the Keystone identity service module. Continuous monitoring of data center security is vital for maintaining safe operations in private clouds and physical environments. Moreover, enhancing security performance in VMware setups can be achieved through agentless antimalware solutions, alongside network intrusion prevention and file reputation services, which collectively contribute to a robust security posture. Ultimately, effective security measures are indispensable for safeguarding sensitive data within these infrastructures.
API Access
Has API
Yes
API Access
Has API
No
Integrations
Auditor for z/OS
No
Docker
Yes
EnCase Forensic
No
FortiSandbox
No
HP-UX
No
HPE OpenVMS
No
NorthStar Navigator
No
OctoXLabs
No
WorkEasy Software
Yes
ZEST Security
Yes
Integrations
Auditor for z/OS
Yes
Docker
No
EnCase Forensic
Yes
FortiSandbox
Yes
HP-UX
Yes
HPE OpenVMS
Yes
NorthStar Navigator
Yes
OctoXLabs
Yes
WorkEasy Software
No
ZEST Security
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
Yes
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Clair
Website
github.com/quay/clair
Vendor Details
Company Name
Broadcom
Founded
1991
Country
United States
Website
www.broadcom.com/products/cybersecurity/endpoint/hybrid-cloud/data-center-security
Product Features
Container Security
Access Roles / Permissions
No
Application Performance Tracking
No
Centralized Policy Management
No
Container Stack Scanning
No
Image Vulnerability Detection
No
Reporting
No
Testing
No
View Container Metadata
No
Static Code Analysis
Analytics / Reporting
No
Code Standardization / Validation
No
Multiple Programming Language Support
No
Provides Recommendations
No
Standard Security/Industry Libraries
No
Vulnerability Management
No
Product Features
Container Security
Access Roles / Permissions
No
Application Performance Tracking
No
Centralized Policy Management
No
Container Stack Scanning
No
Image Vulnerability Detection
No
Reporting
No
Testing
No
View Container Metadata
No
Data Center Management
Audit Trail
No
Behavior-Based Acceleration
No
Cross Reference System
No
Device Auto Discovery
No
Diagnostic Testing
No
Import / Export Data
No
JCL Management
No
Multi-Platform
Yes
Multi-User
No
Power Management
No
Sarbanes-Oxley Compliance
No