# Best Container Security Tools - Page 3 *By [Lauren Worth](https://research.g2.com/insights/author/lauren-worth)* Container security tools are used to secure multiple components of containerized applications or files, along with their infrastructure and connected networks. Containers are a popular way to format units of software during application development, most commonly used by DevOps teams. After development, they are orchestrated, deployed, and networked. Security is essential during all stages of container usage. [Container security](https://research.g2.com/blog/g2-on-cloud-security-conquering-container-security) software is used to manage access, test security, and protect cloud computing infrastructure running containerized applications. Management features will help administrators determine who can access containerized data or integrate with containerized applications. Testing capabilities will assist in developing security policies, discovering zero-day vulnerabilities, and simulating attacks from common threat sources. Some [application security software](https://www.g2.com/categories/application-security) include the ability to defend and test the security of containerized applications. But container-specific security tools provide increased security, monitoring, and networking, for microservices and containerized applications. To qualify for inclusion in the Container Security category, a product must: - Integrate security with DevOps tools - Monitor and secure container networks or pipelines - Enforce access and security policies - Provide runtime protection capabilities ## Top Container Security Tools at a Glance | # | Product | Rating | Best For | What Users Say | |---|---------|--------|----------|----------------| | 1 | [Wiz](https://www.g2.com/products/wiz-wiz/reviews) | 4.7/5.0 (822 reviews) | Agentless container risk with attack-path context | "[Excellent Cloud Risk Visibility and Fast Insights with Wiz](https://www.g2.com/survey_responses/wiz-review-12964571)" | | 2 | [Chainguard](https://www.g2.com/products/chainguard/reviews) | 4.7/5.0 (70 reviews) | Zero-CVE container images with supply-chain provenance | "[Chainguard: Secure, Minimal Images with World-Class Support](https://www.g2.com/survey_responses/chainguard-review-12953098)" | | 3 | [Aikido Security](https://www.g2.com/products/aikido-security/reviews) | 4.6/5.0 (226 reviews) | Low-noise container and code vulnerability scanning | "[Enterprise Security Without an Enterprise Security Team](https://www.g2.com/survey_responses/aikido-security-review-13108704)" | | 4 | [Sysdig Secure](https://www.g2.com/products/sysdig-sysdig-secure/reviews) | 4.8/5.0 (110 reviews) | Runtime threat detection for Kubernetes workloads | "[Excellent Real-Time Kubernetes Security Visibility and Threat Detection](https://www.g2.com/survey_responses/sysdig-secure-review-12711991)" | | 5 | [Microsoft Defender for Cloud](https://www.g2.com/products/microsoft-defender-for-cloud/reviews) | 4.4/5.0 (367 reviews) | Azure-native container image security posture | "[Multi-Cloud Security Alerts and Compliance Audits in One Dashboard](https://www.g2.com/survey_responses/microsoft-defender-for-cloud-review-13123239)" | | 6 | [Orca Security](https://www.g2.com/products/orca-security/reviews) | 4.7/5.0 (302 reviews) | Agentless container and cloud vulnerability prioritization | "[Orca Makes Shadow AI Agents Visible and Governable Across Our Cloud](https://www.g2.com/survey_responses/orca-security-review-13119948)" | | 7 | [CrowdStrike Falcon Cloud Security](https://www.g2.com/products/crowdstrike-falcon-cloud-security/reviews) | 4.5/5.0 (131 reviews) | — | "[Clear Cloud Visibility and Actionable Security Alerts](https://www.g2.com/survey_responses/crowdstrike-falcon-cloud-security-review-13126357)" | | 8 | [Red Hat Advanced Cluster Security for Kubernetes](https://www.g2.com/products/red-hat-advanced-cluster-security-for-kubernetes/reviews) | 5.0/5.0 (12 reviews) | Kubernetes-native container security and compliance | "[Stackrox works](https://www.g2.com/survey_responses/red-hat-advanced-cluster-security-for-kubernetes-review-4197045)" | | 9 | [SentinelOne Singularity Cloud Security](https://www.g2.com/products/sentinelone-singularity-cloud-security/reviews) | 4.9/5.0 (117 reviews) | Autonomous container threat detection and remediation | "[Unified Multi-Cloud Security with AI-Driven Automation and Real-Time Threat Detection](https://www.g2.com/survey_responses/sentinelone-singularity-cloud-security-review-13002699)" | | 10 | [Minimus](https://www.g2.com/products/minimus/reviews) | 5.0/5.0 (49 reviews) | Distroless container hardening with automated CVE reduction | "[Minimus Slashed Our Azure Registry Storage and Data Egress Costs](https://www.g2.com/survey_responses/minimus-review-12870522)" | --- ## What Are the Most Common Questions About Container Security Tools? *AI-generated · Last updated: May 26, 2026* ### Which container security software offers the most detailed reports? Based on G2 reviews, [Wiz](https://www.g2.com/products/wiz-wiz/reviews) stands out for detailed reporting and contextual visibility in container security workflows. According to verified users, Wiz gives teams a unified view of vulnerabilities, misconfigurations, cloud resources, and attack paths, with findings that are easier to interpret and prioritize. G2 reviewers mention strong dashboards, security graphs, compliance reporting, and actionable remediation guidance that help both technical teams and leadership understand what to fix first. Reviews also note that reporting can still be improved in some cases, but overall users consistently describe Wiz as giving deep, high-context insights across container, code, and cloud environments. ### Which platform offers AI-powered container threat detection? Based on G2 reviews, [Wiz](https://www.g2.com/products/wiz-wiz/reviews) is the most frequently mentioned option for AI-powered container threat detection in this dataset. According to verified users, Wiz combines AI-assisted search, AI workflows, and AI-driven security guidance with visibility into runtime risks, vulnerabilities, and toxic combinations across cloud and container environments. G2 reviewers mention using Wiz AI to answer security questions, guide remediation, support threat and forensics workflows, and help teams understand what to fix first. Reviews also highlight container-related issue detection and runtime protection, making it a strong fit for teams that want AI assistance layered into broader container and cloud security operations. ### Best software for compliance-focused container security? Based on G2 reviews, buyers looking for compliance-focused container security often prioritize platforms that combine vulnerability visibility, policy guidance, and audit support. According to verified users, products in this category help teams monitor container risks while supporting frameworks such as SOC 2, PCI, and other compliance requirements. G2 reviewers mention strengths like compliance dashboards, continuous monitoring, policy mapping, and clearer audit preparation. Reviewers also value platforms that reduce security noise so teams can focus on remediation that matters for governance and certification readiness. For container security programs with compliance goals, recent G2 reviews point to a few products that are repeatedly associated with audit readiness, posture visibility, and actionable risk tracking. **Here are some of the top-rated products on G2:** - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) – used for container issues, compliance reporting, cloud posture visibility, and faster audit preparation - [Sysdig Secure](https://www.g2.com/products/sysdig-sysdig-secure/reviews) – supports compliance monitoring and runtime security for Kubernetes and containerized workloads - [Minimus](https://www.g2.com/products/minimus/reviews) – helps teams use minimal, hardened images that simplify compliance validation and audit preparation ### Best platforms for securing Kubernetes workloads? Based on G2 reviews, securing Kubernetes workloads usually means combining runtime visibility, vulnerability management, and policy enforcement in one place. According to verified users, the strongest products in this category help teams monitor clusters in real time, identify risky workload behavior, and prioritize fixes without adding too much noise. G2 reviewers mention Kubernetes-specific visibility, runtime detection, compliance monitoring, and support for containerized environments as key buying factors. They also highlight the value of platforms that connect Kubernetes security to broader cloud and development workflows. Recent review data points to several frequently cited options for organizations that need stronger protection for Kubernetes workloads at scale. **Here are some of the top-rated products on G2:** - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) – gives teams visibility into Kubernetes risks, runtime findings, and container vulnerabilities within a broader cloud security workflow - [Sysdig Secure](https://www.g2.com/products/sysdig-sysdig-secure/reviews) – focuses on real-time Kubernetes runtime threat detection, compliance monitoring, and workload protection - [Calico](https://www.g2.com/products/calico-2025-10-31/reviews) – helps secure Kubernetes traffic with network policies, zero-trust controls, and workload visibility ### Top platforms for securing container images? Based on G2 reviews, container image security buyers often look for platforms that reduce vulnerability noise before deployment and fit easily into existing workflows. According to verified users, the most discussed strengths in this area include hardened or minimal images, image scanning, daily rebuilds, SBOM visibility, and easier remediation. G2 reviewers mention that image-focused tools can cut down the volume of low-value CVE triage, while broader cloud security platforms help teams understand image risk alongside runtime and infrastructure context. Reviews show that teams value products that improve release confidence, reduce maintenance effort, and make vulnerability management more manageable across development and production environments. **Here are some of the top-rated products on G2:** - [Minimus](https://www.g2.com/products/minimus/reviews) – provides minimal, hardened images that reduce vulnerability alerts and simplify secure deployments - [Chainguard](https://www.g2.com/products/chainguard/reviews) – helps teams use secure-by-default images with strong SBOM transparency and lower CVE overhead - [Echo](https://www.g2.com/products/echo-echo/reviews) – offers secure replacement images that reviewers say dramatically reduce container CVEs with minimal workflow changes ### Top-rated container security platforms for large enterprises? Based on G2 reviews, large enterprises tend to favor container security platforms that offer broad visibility, workflow integration, and support for complex multi-cloud or Kubernetes environments. According to verified users, enterprise buyers value tools that help consolidate multiple security functions, reduce operational noise, and provide context-rich findings for different teams. G2 reviewers mention needs such as centralized dashboards, policy controls, runtime monitoring, compliance support, and integration across cloud, code, and container layers. Reviews also suggest that enterprise teams appreciate platforms that scale across many assets while still helping prioritize the most meaningful risks. Recent G2 feedback highlights a few products most often associated with enterprise-scale container security operations. **Here are some of the top-rated products on G2:** - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) – used by enterprise teams for broad multi-cloud visibility, prioritized findings, and consolidated security operations - [Sysdig Secure](https://www.g2.com/products/sysdig-sysdig-secure/reviews) – supports enterprise container and Kubernetes runtime security with compliance and remediation workflows - [CrowdStrike Falcon Cloud Security](https://www.g2.com/products/crowdstrike-falcon-cloud-security/reviews) – brings workload, container, and cloud security visibility into a unified enterprise platform ### Top tools for scanning containers for vulnerabilities? Based on G2 reviews, teams scanning containers for vulnerabilities want tools that surface meaningful findings without overwhelming developers and security teams. According to verified users, the most useful products combine image or workload scanning with prioritization, remediation guidance, and visibility into which vulnerabilities actually matter. G2 reviewers mention benefits such as easier vulnerability management, cleaner scan results, support for container and dependency scanning, and better coordination between security and engineering. Some buyers also favor products that reduce the number of vulnerabilities in the first place through hardened images, while others want broader cloud and runtime visibility tied to scan outputs. Recent reviews consistently point to a few well-cited options. **Here are some of the top-rated products on G2:** - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) – helps teams spot container vulnerabilities alongside cloud misconfigurations and prioritize remediation - [Sysdig Secure](https://www.g2.com/products/sysdig-sysdig-secure/reviews) – scans container images, dependencies, and runtime workloads with remediation guidance - [Aikido Security](https://www.g2.com/products/aikido-security/reviews) – provides automated container scanning within an all-in-one workflow for vulnerability detection and remediation ### Which is the best container security platform for DevOps teams? Based on G2 reviews, [Wiz](https://www.g2.com/products/wiz-wiz/reviews) is the strongest fit here because reviewers frequently describe it as easy to deploy, highly actionable, and well integrated into development and remediation workflows. According to verified users, Wiz helps DevOps and engineering teams understand cloud and container risks in context, prioritize what is actually exploitable, and shift fixes earlier into the lifecycle. G2 reviewers mention integrations with developer tools, CI/CD processes, Jira automation, repositories, and code-to-cloud visibility that make collaboration easier across security and engineering. They also note that smaller teams benefit from the filtered, lower-noise approach, even if the platform can feel information-dense at first. ### Which container security tool integrates with CI/CD pipelines? Based on G2 reviews, [Wiz](https://www.g2.com/products/wiz-wiz/reviews) is the most frequently evidenced answer for CI/CD integration in this dataset. According to verified users, Wiz supports shift-left security by scanning before deployment, connecting with repositories, and fitting into workflows that include automation and issue routing. G2 reviewers mention Wiz CLI scans, integrations with GitHub, Jira automation, connectors for repositories, and support for code-to-cloud visibility that helps teams catch container and infrastructure issues earlier. While several products reference CI/CD support, Wiz appears most consistently in recent reviews for combining pipeline integration with broader visibility, prioritization, and remediation context across container and cloud security use cases. ### Best tools for runtime container security monitoring? Based on G2 reviews, buyers evaluating runtime container security monitoring usually prioritize real-time visibility into running workloads, suspicious behavior, and actionable alerts. According to verified users, the best-fit products help teams monitor Kubernetes and container environments continuously while connecting runtime findings with vulnerability and compliance workflows. G2 reviewers mention runtime threat detection, workload monitoring, threat prevention, and runtime visibility as especially valuable for reducing blind spots after deployment. They also favor platforms that make it easier to understand which issues are truly urgent rather than flooding teams with raw alert volume. Recent G2 reviews most often associate the following products with runtime-focused container security use cases. **Here are some of the top-rated products on G2:** - [Sysdig Secure](https://www.g2.com/products/sysdig-sysdig-secure/reviews) – specializes in real-time runtime threat detection and monitoring for containers and Kubernetes workloads - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) – offers runtime protection and context-rich visibility into container and cloud risks - [CrowdStrike Falcon Cloud Security](https://www.g2.com/products/crowdstrike-falcon-cloud-security/reviews) – provides real-time workload and container monitoring with unified cloud security visibility ## G2 Grid® for Container Security Tools ![G2 Grid® for Container Security Tools plotting products by satisfaction and market presence](https://www.g2.com/categories/container-security-tools/grids.png?focus%5B%5D=146504&focus%5B%5D=1183453&focus%5B%5D=1259627&focus%5B%5D=20460&focus%5B%5D=52233&focus%5B%5D=123609&focus%5B%5D=1212165&focus%5B%5D=151443) Highlighted products: Wiz, Chainguard, Aikido Security, Sysdig Secure, Microsoft Defender for Cloud, Orca Security, Red Hat Advanced Cluster Security for Kubernetes, and CrowdStrike Falcon Cloud Security. Underlying data: [Grid® JSON](https://www.g2.com/categories/container-security-tools/grids.json?focus%5B%5D=wiz-wiz&focus%5B%5D=chainguard&focus%5B%5D=aikido-security&focus%5B%5D=sysdig-sysdig-secure&focus%5B%5D=microsoft-defender-for-cloud&focus%5B%5D=orca-security&focus%5B%5D=red-hat-advanced-cluster-security-for-kubernetes&focus%5B%5D=crowdstrike-falcon-cloud-security) ## How Many Container Security Tools Products Does G2 Track? **Total Products under this Category:** 74 ### Category Stats (Jul 2026) - **Average Rating**: 4.53/5 The average rating of products in this category, based on all submitted ratings - **Top Trending Product**: Orca Security (+0.56%) - Among all products in this category, Orca Security recorded the largest rating increase compared to last month *Last updated: July 20, 2026* ## How Does G2 Rank Container Security Tools Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 4,400+ Authentic Reviews - 74+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. ## Which Container Security Tools Is Best for Your Use Case? - **Leader:** [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - **Highest Performer:** [Minimus](https://www.g2.com/products/minimus/reviews) - **Easiest to Use:** [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - **Top Trending:** [Aikido Security](https://www.g2.com/products/aikido-security/reviews) - **Best Free Software:** [Wiz](https://www.g2.com/products/wiz-wiz/reviews) --- **Sponsored** ### Upwind Upwind is the runtime-first cloud security platform that secures your deployments, configurations, and applications by providing real-time visibility from the inside out. We’ve built a unified fabric that maps your environment as it runs - revealing what’s truly at risk, what’s actively happening, and how to respond quickly and effectively. With Upwind, security, dev, and ops teams move faster, stay focused, and fix risks that matter most. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1594&secure%5Bchosen_at%5D=2026-07-20T14%3A00%3A38Z&secure%5Bdisplayable_resource_id%5D=1594&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=1594&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=1333227&secure%5Bresource_id%5D=1594&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fcontainer-security-tools&secure%5Btoken%5D=22f40754a485cd526e1554e90d3fbdfbb046c4853c134f2616d8c74c585e3e99&secure%5Burl%5D=https%3A%2F%2Fwww.upwind.io&secure%5Burl_type%5D=custom_url) --- ## What Are the Top-Rated Container Security Tools Products in 2026? ### 1. [Portshift Containers Security Operator](https://www.g2.com/products/portshift-containers-security-operator/reviews) Portshift is a Kubernetes security leader, our innovative digital identity-based solution creates a unique, signed identity for each workload at the CI/CD pipeline stage, that is then used to enforce runtime security policies. **Average Rating:** 5.0/5.0 **Total Reviews:** 1 **Who Is the Company Behind Portshift Containers Security Operator?** - **Seller:** [Portshift](https://www.g2.com/sellers/portshift) - **HQ Location:** N/A - **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Mid-Market #### What Are Recent G2 Reviews of Portshift Containers Security Operator? **"[Container Security is a must](https://www.g2.com/survey_responses/portshift-containers-security-operator-review-4218966)"** **Rating:** 5.0/5.0 stars *— Scott K.* [Read full review](https://www.g2.com/survey_responses/portshift-containers-security-operator-review-4218966) --- #### What Are G2 Users Discussing About Portshift Containers Security Operator? - [What is Portshift Containers Security Operator used for?](https://www.g2.com/discussions/portshift-containers-security-operator-what-is-portshift-containers-security-operator-used-for) - [What is Portshift Containers Security Operator used for?](https://www.g2.com/discussions/what-is-portshift-containers-security-operator-used-for) ### 2. [Runecast](https://www.g2.com/products/runecast/reviews) Runecast is an enterprise CNAPP platform which saves your Security and Operations teams time and resources by enabling a proactive approach to ITOM, CSPM, and compliance. It helps you proactively remediate vulnerabilities for continuous compliance, whether on-prem, cloud or containers. By proactively using our agentless scanning in real-time admins discover potential risks and remediation solutions before any issues can develop into a major outage. Runecast’s AI-RAIKA, leverages advanced natural language processing (NLP) capabilities to interpret a vast amount of information to provide automated audits for security compliance standards, vulnerabilities (such as KEVs, CVEs or VMSAs) and technology vendor best practices. The platform has been recognized with Frost & Sullivan's 2023 European New Product Innovation Award in the CNAPP industry for its strong overall performance and commitment to user experience. NAVIGATING YOUR COMPLEXITY Runecast helps teams with a simpler transition to cloud, enabling admins to fully understand their hybrid environments and Cloud Security Posture Management (CSPM) and Kubernetes Security Posture Management (KSPM). Running securely on-premises, it provides insights into what is happening both in the cloud and on-site. IMMEDIATE VALUE FOR TEAMS As Runecast helps teams to stabilize availability and ensure security compliance, it contributes also to greater ROI for both existing and future investments with AWS, Azure, Kubernetes and VMware. FULLY ON-PREM SECURE Operates fully on-prem to analyze your hybrid-cloud environment, so that your data remains safely on-site. To provide additional security, Runecast features a customizable, transparent rules engine. RUNECAST FOR SECURITY AND COMPLIANCE Vulnerability Management Regular automated scanning, recommendations, remediation, and the ability to set up vulnerability management policies are just some of the requirements many enterprises have. The Runecast platform is constantly updated to detect the latest vulnerabilities for all of the supported technologies. Container Security Runecast scans container images for known vulnerabilities and misconfigurations, and can also detect runtime issues such as exposed ports and running processes. It also provides a public API which can be used in your CI/CD platform to analyze the container images and whether they are vulnerable or not to known vulnerabilities, before deploying them in production. Compliance with Security Standards Runecast offers automated audits against security hardening guidelines and common industry standards like CIS Benchmarks, NIST 800-53, PCI DSS, HIPAA, DISA STIG 6, GDPR, KVKK (Turkey), ISO 27001, BSI IT-Grundschutz, Essential 8 and Cyber Essentials Security Standard. RUNECAST FOR IT OPERATIONS TEAMS Vendor Best Practices for Security Hardening Runecast continuously monitors your complex environment, reporting violations and providing recommendations against Vendor Best Practices. It maintains a database with Best Practices of the latest AWS, Azure, Kubernetes, GCP, VMware and Windows and Linux OS. It analyzes your environment to detect any configuration issues against Vendor Best Practices. This delivers valuable insights to improve the stability and security of your infrastructure. Configuration Vault Tracks your configuration to help you prevent drift. Reports your entire configuration and provides the ability to compare your configurations over time. Hardware Compatibility and Upgrade Stimulations Runecast has automated the process of validating the hardware compliance of hosts and clusters against a selected ESXi version, ensuring compliance with the VMware Compatibility Guide (VCG) and vSAN Hardware Compatibility List (vSAN HCL). The AI-powered platform runs a quick and automated analysis using the latest HCL for your servers, I/O devices, and vSAN controllers. For upgrade planning, admins can see the results of multiple HCL upgrade simulation scenarios within seconds, and the findings are presented in a comprehensive way with details about any non-compatibility and how to resolve it. Validates your hardware, drivers, and firmware against current and upstream releases of ESXi for faster upgrade planning. Remediation Scripts A growing number of findings in Runecast offer remediation actions – allowing you to download the customized script to perform the reconfiguration. Some rules offer more than one remediation option, for example PowerCLI and Ansible. SUPPORTED SERVICES SUPPORTED SYSTEMS: AWS, Azure GCP, Kubernetes (1.20 and above), VMware (VMware vSphere, NSX-V, NSX-T, VMware Horizon, VMware Cloud Director, AP HANA for VMware, VMware on Nutanix, Pure Storage), Windows (Microsoft Windows) and Linux OS (RHEL 8, CentOS 7). SECURITY STANDARDS: CIS Benchmarks, NIST 800-53, PCI DSS, HIPAA, DISA STIG 6, GDPR, KVKK (Turkey), ISO 27001, BSI IT-Grundschutz, Essential 8 and Cyber Essentials Security Standard. INTEGRATIONS: Jira, ServiceNow, vSphere Client Plugin, OpenID Connect, REST API, HPE Ezmeral. REMEDIATION TOOLS: Ansible (VMware), PowerCLI (VMware), AWS CLI (AWS), AWS Tools for PowerShell (AWS), GCP CLI **Average Rating:** 4.8/5.0 **Total Reviews:** 21 **How Do G2 Users Rate Runecast?** - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.0/10) **Who Is the Company Behind Runecast?** - **Seller:** [Runecast Solutions](https://www.g2.com/sellers/runecast-solutions) - **Year Founded:** 2014 - **HQ Location:** London, London - **Twitter:** @Runecast (1,093 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/5226278 (14 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 48% Enterprise, 24% Mid-Market #### What Are Recent G2 Reviews of Runecast? **"[Runecast](https://www.g2.com/survey_responses/runecast-review-7966299)"** **Rating:** 5.0/5.0 stars *— Manolis F.* [Read full review](https://www.g2.com/survey_responses/runecast-review-7966299) --- **"[Runecast gives me great audit and security compliance insights immediately.](https://www.g2.com/survey_responses/runecast-review-5371828)"** **Rating:** 5.0/5.0 stars *— Verified User in Telecommunications* [Read full review](https://www.g2.com/survey_responses/runecast-review-5371828) --- ### 3. [Araali Network Security Pay-as-you-go](https://www.g2.com/products/araali-network-security-pay-as-you-go/reviews) Kubernetes networking is open by default pods can freely talk to each other. Moreover, microservices architecture presents an increased attack surface and potential for damage. Once an app in the Kubernetes cluster is compromised, it puts the entire cluster at risk. The AWS shared responsibility model also puts the onus of Protecting Apps, Kubernetes Network, and Pods on the user. With a single click, Araali autosegments your Kubernetes cluster on app boundaries and ensures compromises are contained, and damages are limited. Test drive and discover the ease of Araali Runtime Security for Free. The paid tier allows you to enjoy the experience beyond the 14 day trial. **Who Is the Company Behind Araali Network Security Pay-as-you-go?** - **Seller:** [Araali Networks](https://www.g2.com/sellers/araali-networks) - **Year Founded:** 2018 - **HQ Location:** Fremont, US - **LinkedIn® Page:** https://www.linkedin.com/company/araali-networks/ (4 employees on LinkedIn®) ### 4. [Carbonetes](https://www.g2.com/products/carbonetes/reviews) Carbonetes is the most comprehensive container security analysis in the market. It can be integrated seamlessly into your CI/CD pipeline so that your containers are automatically scanned and evaluated to ensure their safety. Carbonetes evaluates all threat vectors in your native code and your open source tools. It evaluates these threats against company policy to ensure your code is secure before it goes into your Kubernetes cluster. It provides total visibility through drill-down into the detail of each threat vector. This makes it fast and easy for developers to mitigate those threats and get their code remediated and into production. **Who Is the Company Behind Carbonetes?** - **Seller:** [Carbonetes](https://www.g2.com/sellers/carbonetes) - **Year Founded:** 2019 - **HQ Location:** Houston, US - **Twitter:** @carbonetes (14 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/carbonetes (8 employees on LinkedIn®) ### 5. [CloudWize](https://www.g2.com/products/cloudwize-cloudwize/reviews) CloudWize is a no-code Cloud Security Center of Excellence that gives you maximum cloud compliance & security. Get 360° Protection from Architecture Design to Runtime. CludWize enforces cloud regulations with over 1K rules running continuously, scans your cloud vulnerabilities, and remediates them automatically. With our unique investigation graph engine, you can detect and fix cloud issues in minutes instead of days and weeks. This holistic solution offers a blackbox web app penetration test, evolved IAM (identity access management), IaC (infrastructure as code) risk scanning, Data Security Posture Management, and more. Why deal with many tools when you can have everything in one place? CNAPP + WAAP + KSPM – CSPM + CWPP + CIEM + CASB + DSPM + CNSP = CloudWize (CSCoE) **Average Rating:** 4.7/5.0 **Total Reviews:** 11 **How Do G2 Users Rate CloudWize?** - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.0/10) **Who Is the Company Behind CloudWize?** - **Seller:** [CloudWize](https://www.g2.com/sellers/cloudwize) - **Year Founded:** 2019 - **HQ Location:** Netanya, IL - **Twitter:** @cloud_wize (94 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/cloudwize-io/about (4 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 50% Small-Business, 33% Mid-Market #### What Are CloudWize's Pros and Cons? **Pros:** - Security (7 reviews) - Ease of Use (6 reviews) - Cloud Integration (5 reviews) - Cloud Management (5 reviews) - Cloud Services (5 reviews) **Cons:** - Complex Implementation (1 reviews) - Complex Setup (1 reviews) - Customization Difficulty (1 reviews) - Difficult Navigation (1 reviews) - Excessive Customization (1 reviews) ### What Do G2 Reviewers Say About CloudWize? *AI-generated summary from verified user reviews* **Pros:** - Users value the **exceptional security features** of CloudWize, enabling total control and proactive vulnerability management. - Users find CloudWize's **ease of use** invaluable, enjoying intuitive features and excellent customer support for optimal security management. - Users value the **integrated cloud security** of CloudWize, enhancing threat detection and response across environments. - Users value the **effective cloud management** features of CloudWize, enhancing security and control over their systems. - Users appreciate the **credible security features** of CloudWize, enabling companies to maintain absolute control over their systems. **Cons:** - Users find the **complex implementation** of CloudWize challenging, often needing templates for assistance during setup. - Users find the **complex setup** of CloudWize challenging, often requiring templates for proper implementation and guidance. - Users find the **customization difficulty** in CloudWize limits their ability to fully tailor the platform to their needs. - Users find the **difficult navigation** in CloudWize occasionally hinders their overall experience despite its positive aspects. - Users note that **excessive customization** options can complicate the user experience beyond what is necessary for effective use. #### What Are Recent G2 Reviews of CloudWize? **"[The quick-witted and compliance data security platform for cloud management](https://www.g2.com/survey_responses/cloudwize-review-9119208)"** **Rating:** 4.5/5.0 stars *— ravella l.* [Read full review](https://www.g2.com/survey_responses/cloudwize-review-9119208) --- **"[The Consistent and Affirmative Platform for Cloud Management and Operations SupportTh](https://www.g2.com/survey_responses/cloudwize-review-9111779)"** **Rating:** 4.5/5.0 stars *— Yadira J.* [Read full review](https://www.g2.com/survey_responses/cloudwize-review-9111779) --- ### 6. [Constellation](https://www.g2.com/products/edgeless-systems-constellation/reviews) Constellation leverages confidential computing to isolate entire Kubernetes clusters from the infrastructure. Finally, the public cloud turns into your private cloud. All data in the cluster remains encrypted in all states - at rest, in transit, and during processing. The integrity of the entire cluster is verified based on cryptographic certificates and latest supply-chain security mechanisms. The source code of Constellation is accessible for anyone to review on GitHub. This enables meaningful remote attestation. **Who Is the Company Behind Constellation?** - **Seller:** [Edgeless Systems](https://www.g2.com/sellers/edgeless-systems) - **Year Founded:** 2020 - **HQ Location:** Bochum, DE - **LinkedIn® Page:** https://linkedin.com/company/edgeless-systems (21 employees on LinkedIn®) ### 7. [Darktrace / CLOUD](https://www.g2.com/products/darktrace-cloud/reviews) Darktrace / CLOUD is a Cloud-Native Application Protection Platform (CNAPP) with advanced real-time Cloud Detection and Response (CDR) to protect runtime environments from active threats. It secures modern hybrid and multi-cloud environments by combining posture management, runtime threat detection, cloud-native response, and automated cloud investigations in a single AI-driven platform. As organizations scale across AWS, Azure, Google Cloud, SaaS, containers, and serverless architectures, static posture checks and alert-heavy tools are no longer enough. Darktrace / CLOUD continuously understands how your cloud environment behaves and automatically stops threats as they unfold. 1. Stop Active Cloud Threats in Real Time with AI-Driven CDR Darktrace delivers true Cloud Detection and Response in live production environments. Its Self-Learning AI monitors identity behavior, workload activity, and network connections to detect the most subtle indicators of account compromise, privilege escalation, insider threats, ransomware, and novel attacks. When real threats emerge, it can take precise, proportionate action to contain them immediately, minimizing business disruption. 2. Maintain Continuous Cloud Visibility, Posture Assurance, and Risk Reduction Darktrace combines continuous cloud monitoring with Cloud Security Posture Management (CSPM) capabilities to dynamically map architecture, identities (human and non-human), services, containers, and configurations. It identifies misconfigurations, vulnerabilities, toxic combinations of privileges, and exploitable attack paths, not just static compliance gaps. This ensures organizations maintain real-time visibility and awareness of risk as cloud environments evolve. 3. Accelerate Incident Response with Automated Cloud Investigations at Scale Darktrace integrates with any detection source and your existing security stack to perform automated investigations at cloud speed and scale. When suspicious activity is detected, Darktrace automatically collects and analyzes forensic evidence across logs, configurations, disk, memory, and ephemeral workloads. Full attacker timelines are generated in minutes, enabling rapid root-cause analysis, confident remediation, and audit-ready evidence without manual data gathering. While many CNAPP solutions focus primarily on posture or fragmented point capabilities, Darktrace / CLOUD unifies prevention, real-time detection, response, and automated investigation in one continuous AI-driven workflow, delivering protection that adapts as fast as the cloud itself. AI-Driven Automation from Detection to Investigation Self-Learning AI detects known, unknown, and novel threats while autonomous response and automated investigations dramatically reduce analyst workload and stop threats automatically. Unmatched Cloud Coverage with Breadth and Depth Darktrace unifies CSPM, identity analytics, runtime CDR, and forensic depth across IaaS, PaaS, SaaS, containers, and serverless environments to deliver protection at cloud speed and scale. True Hybrid, Cross-Domain Protection The platform correlates live activity across cloud, SaaS, on-premises, and network environments to uncover and contain lateral, cross-domain attacks. Flexible Deployment for Enterprise Reality With agentless API integrations and optional agent-based telemetry, Darktrace supports SaaS, hosted, and on-prem deployments, delivering rapid time-to-value while meeting regulatory and operational requirements. **Average Rating:** 4.5/5.0 **Total Reviews:** 1 **Who Is the Company Behind Darktrace / CLOUD?** - **Seller:** [Darktrace](https://www.g2.com/sellers/darktrace) - **Company Website:** https://www.darktrace.com - **Year Founded:** 2013 - **HQ Location:** Cambridgeshire, England - **Twitter:** @Darktrace (18,177 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/5013440/ (2,607 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Mid-Market #### What Are Recent G2 Reviews of Darktrace / CLOUD? **"[Real-Time Cloud Visibility and Proactive Anomaly Detection](https://www.g2.com/survey_responses/darktrace-cloud-review-12659218)"** **Rating:** 4.5/5.0 stars *— Angel I.* [Read full review](https://www.g2.com/survey_responses/darktrace-cloud-review-12659218) --- ### 8. [Deepfence.io](https://www.g2.com/products/deepfence-io/reviews) An enlightened approach to security observability, across clouds, containers, and serverless. Deepfence ThreatMapper is the leading open source threat discovery solution for cloud-native applications. Investigate and monitor your production platforms, registries and build pipelines to find vulnerabilities, exposed secrets and other potential threats. Rank them based on risk-of-exploit to determine which pose the greatest risk. Deepfence ThreatStryker enterprise provides runtime protection. It observes potential attack behaviour, identifies attacks-in-progress and deploys targeted interventions to stop attackers in their tracks **Who Is the Company Behind Deepfence.io?** - **Seller:** [Deepfence](https://www.g2.com/sellers/deepfence) - **Year Founded:** 2018 - **HQ Location:** Palo Alto, US - **Twitter:** @deepfence (574 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/10487480 (6 employees on LinkedIn®) ### 9. [Edge Computing Containers](https://www.g2.com/products/edge-computing-containers/reviews) Deploy containers on a platform with more diverse PoP locations than centralized cloud providers, getting your workload closer to your end users and clients. **Who Is the Company Behind Edge Computing Containers?** - **Seller:** [StackPath](https://www.g2.com/sellers/stackpath) - **Year Founded:** 2009 - **HQ Location:** Los Angeles, CA - **Twitter:** @StackPath (2,318 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/402904/ (4 employees on LinkedIn®) ### 10. [Fairwinds Insights](https://www.g2.com/products/fairwinds-insights/reviews) Fairwinds Insights provides platform teams all the business and mission critical functionality to make Kubernetes easy for developers to use and self-service. Fairwinds Insights is a SaaS for platform teams to implement standardization and policies that enable developers. Install the Insights agent into a cluster. In minutes, teams can see their cluster health score, dig into issues around security, efficiency and reliability issues. Insights identifies the issues and offers remediation advice to the user. Integrate Insights findings into your existing developer toolbox including GitHub and Jira. Set Automation Rules to automatically create Jira tickets and the Admission Controller to reject any code not in compliance with standards. Use existing out of the box policies based on development practices and create your own based on your organization's opinions. **Who Is the Company Behind Fairwinds Insights?** - **Seller:** [Fairwinds](https://www.g2.com/sellers/fairwinds) - **Year Founded:** 2016 - **HQ Location:** Boston, US - **Twitter:** @fairwindsops (1,390 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/fairwinds/ (56 employees on LinkedIn®) ### 11. [IRIS](https://www.g2.com/products/codeeye-iris/reviews) CodeEye's IRIS is a next-generation application security posture management (ASPM) platform, offers an all-in-one solution with real-time, AI-powered vulnerability and threat detection, correlation, prioritization, and remediation, easing the tension between time-to-market and risk mitigation. How it Works? Unlike traditional ASPM Solutions, IRIS detects vulnerabilities within the product development lifecycle and application infrastructure, while simultaneously providing continuous penetration testing and attack surface management to production environments. IRIS detects, correlates, provides risk-based analysis, and prioritizes application security findings in real time with automated workflows for remediation – all within one platform. IRIS seamlessly integrates with your tools, pipelines, and workflows, and supports your favourite languages. Unlock the Benefits: 1) Centralize detection, prioritization, and remediation of application threats and vulnerabilities. 2) Real-time actionable insights. 3) Establish resilient DevSecOps processes based on risk management. 4) Implement automated workflows to accelerate the identification and resolution of application risks. 5) Adopt a straightforward licensing model. 6) Ability to measure the effectiveness of your application security program. 7) Deploy within 24 hours with simplicity and ease of operation. 8) Built-in policy compliance measures. Next-Gen ASPM Managed Service In today's digital landscape, organizations grapple with deciphering and prioritizing the criticality of code and application related threats and vulnerabilities. The scarcity and expense of specialized talent capable of bridging the gap between DevOps and SecOps exacerbates this challenge. CodeEye's expertise in Application Security provides a Continuous AppSec Partner, accelerating program maturity with expert guidance and advanced technology. Our IRIS Managed Service centralizes application risk management, helping you define compliance measures and policies for prioritization and remediation, ensuring you grasp and address program risk in real-time. Key Features - Static Application Security Testing (SAST): Scans your source code for security risks before an issue goes to production. - Software Composition Analysis (SCA): Continuously monitors your code for known vulnerabilities and other security risks. - Container Scanning: Scans your container in real time for packages that contain security threats and vulnerabilities. - Dynamic Application Security Testing (DAST): Dynamically tests your production applications for vulnerabilities through simulated attacks. - Attack Surface Management (ASM): Continuously identifies, monitors, and manages external internet-connected assets for potential attack vectors and exposures. - Risk and Compliance: Continuously evaluates regulatory and internal security policy compliance using real-time and historical reporting. Vendor of Record Award CodeEye's IRIS is recognized as a Vendor of Record by the Ministry of Government and Consumer Services for IT Security Products In 2024, NIST updated its Cyber Security Framework (CSF) with significant implications for security by design and secure SDLC. Our Risk and Compliance module supports compliance with NIST CSF 2.0 throughout the software development lifecycle. Gain a comprehensive view of various scanning modules aligned with the CSF's five core functions: Identify, Protect, Detect, Respond, and Recover. Our Difference: An all-in-one platform with straight forward licensing and seamless integration. Your Results: A tool that works with your existing tools and workflows, providing security without hidden costs or complexities. Our Difference: Continuous penetration testing and attack surface management. Your Results: Identify and close gaps before an attacker exploits them across your ever-changing attack surface. Our Difference: Quick and Easy Deployment Your Results: Security monitoring and testing within 24 hours, without extensive setup or training. Our difference: Built-in risk and compliance policy module Your Results: Ensure regulatory and internal compliance with built-in policy measures aligned with industry standards like NIST CSF 2.0. Our Difference: Automated Workflows for remediation. Your Results: Rapid risk mitigation, reducing the time, effort and cost of finding and fixing vulnerabilities to ensure continuous protection. Our Difference: Real-Time, AI-powered vulnerability Your Results: Immediately identify and address security threats with precise, actionable intelligence. Our Difference: Threat and vulnerability detection, correlation, and risk-based analysis. Your Results: Simplified security operations where critical vulnerabilities are addressed first. **Who Is the Company Behind IRIS?** - **Seller:** [CodeEye](https://www.g2.com/sellers/codeeye) - **Year Founded:** 2015 - **HQ Location:** Toronto, CA - **Twitter:** @CodeEyeAI (6 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/15246398 (18 employees on LinkedIn®) ### 12. [Kaspersky Container Security](https://www.g2.com/products/kaspersky-container-security/reviews) Kaspersky Container Security protects against information security risks inherent in containerized environments – from container image vulnerabilities to cluster node setup misconfigurations – while automating security and compliance checks. Kaspersky Container Security protects the entire lifecycle of containerized apps, from development to operation. • Seamlessly integrates security into the software development process: Detects vulnerabilities in running containers Checks container images from the registry Monitors resource consumption and communications between containers • Provides comprehensive protection for a key components of the containerized application development and execution environment: Monitors authentication and authorization configuration Checks orchestrator configuration Process and network control • Detects violations of regulatory requirements in various components of the container environment and performs audits in accordance with national and international standards Checks at both orchestrator and individual container level Best practices audits Vulnerability analysis based on NIST and Kaspersky databases • Clear and intuitive widgets and infographics help not only to monitor product status, but also to detect security incidents based on indirect indicators Monitors cluster status Fully customized widgets to reveal cross-section data Resource inventory **Who Is the Company Behind Kaspersky Container Security?** - **Seller:** [Kaspersky](https://www.g2.com/sellers/kaspersky-bce2dc7f-2586-4e87-96da-114de2c40584) - **Year Founded:** 1997 - **HQ Location:** Moscow - **Twitter:** @kasperskylabind (1,291 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/kaspersky/ (4,576 employees on LinkedIn®) - **Phone:** 1-866-328-5700 ### 13. [Kubesafe](https://www.g2.com/products/kubesafe/reviews) Kubesafe is a comprehensive data protection and management solution designed for cloud-native applications running on Kubernetes. It enables enterprises to implement backup, recovery, disaster protection, and application mobility without requiring additional hardware or intermediate storage infrastructure. By integrating seamlessly with existing storage systems, Kubesafe ensures efficient and reliable protection of applications, their data, and configurations. Key Features and Functionality: - Backup and Recovery: Provides frequent recovery points to safeguard against operator errors, allowing for quick restoration of applications and data. - Disaster Protection: Creates replicated copies in other clusters, enabling recovery from site disasters and ensuring business continuity. - Copy Data Management: Utilizes replicas for analysis, testing, and development purposes, enhancing operational flexibility. - Mobility: Facilitates the movement of applications between clouds as business needs evolve, supporting hybrid and multi-cloud strategies. Primary Value and Problem Solved: Kubesafe addresses the critical need for robust data protection in Kubernetes environments, where traditional backup solutions may fall short. By offering an application-centric approach, it captures not only the data but also the associated artifacts such as code images, services, metadata, and configuration information. This holistic protection ensures that enterprises can recover, migrate, and clone applications efficiently, meeting stringent recovery time and recovery point objectives. Additionally, Kubesafe's policy-driven automation simplifies the management of backups and disaster recovery processes, reducing the complexity and potential for human error. **Who Is the Company Behind Kubesafe?** - **Seller:** [Kubesafe](https://www.g2.com/sellers/kubesafe) - **Year Founded:** 2018 - **HQ Location:** San Jose, US - **LinkedIn® Page:** https://www.linkedin.com/company/52151186 (1 employees on LinkedIn®) ### 14. [Netmaker](https://www.g2.com/products/netmaker-2021-10-13/reviews) Netmaker is a **Who Is the Company Behind Netmaker?** - **Seller:** [Gravitl](https://www.g2.com/sellers/gravitl-daba38e4-e760-4a02-beb4-085c8fc0ed27) - **Year Founded:** 2009 - **HQ Location:** Santa Monica, US - **LinkedIn® Page:** https://www.linkedin.com/company/gravity.com/ (19 employees on LinkedIn®) ### 15. [Plerion](https://www.g2.com/products/plerion/reviews) Plerion is a cloud security platform designed to assist organizations in managing and mitigating risks within their cloud environments. Unlike traditional security tools that inundate users with alerts, Plerion focuses on actionable insights, enabling teams to address vulnerabilities effectively. By streamlining the risk management process, Plerion transforms the way organizations approach cloud security, ensuring that the most critical threats are prioritized and resolved. The platform is tailored for IT security teams and cloud administrators across various industries that utilize cloud services such as AWS, Azure, and Google Cloud Platform (GCP). Plerion’s unique approach allows users to visualize their cloud infrastructure, identities, workloads, and code as a cohesive graph. This visualization helps users identify the approximately 1% of risks that are genuinely exploitable, eliminating the noise typically associated with security alerts. By presenting a concise, ranked list of vulnerabilities, Plerion empowers teams to focus their efforts where they matter most. At the heart of the Plerion platform is Pleri, an AI-driven cloud security engineer that mimics the investigative capabilities of a human security expert. Pleri assesses findings, verifies their exploitability in context, and traces risks back to the underlying code responsible for them. This automated process culminates in the creation of pull requests or Jira tickets for remediation, ensuring that every proposed change awaits human approval. This feature not only enhances accountability through full audit trails but also allows for easy rollbacks if necessary. Plerion’s comprehensive coverage includes cloud configuration, workloads, identity and permissions, data, code, and AI workloads, making it a versatile solution for diverse cloud environments. The platform also offers compliance mapping against a wide range of frameworks, linking each identified failure to specific corrective actions rather than merely generating reports. This capability significantly reduces the time and effort required for compliance management. Organizations using Plerion have reported substantial improvements in their security operations. For instance, Deputy achieved an 80% reduction in alerts and decreased their time-to-remediation from 30 days to just 4 hours. Similarly, Basis eliminated 40 hours of manual review each week, illustrating the platform's efficiency. With ISO 27001 certification, SOC 2 attestation, and the AWS Security Software Competency, Plerion ensures a high standard of security and reliability. By deploying in minutes rather than months, Plerion allows organizations to put their cloud security on autopilot while maintaining a human touch in the decision-making process. **Average Rating:** 4.7/5.0 **Total Reviews:** 26 **How Do G2 Users Rate Plerion?** - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.0/10) **Who Is the Company Behind Plerion?** - **Seller:** [Plerion](https://www.g2.com/sellers/plerion) - **Company Website:** https://plerion.com/ - **Year Founded:** 2021 - **HQ Location:** Sydney, AU - **Twitter:** @PlerionHQ (141 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/plerion (31 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer Software, Financial Services - **Company Size:** 52% Mid-Market, 33% Small-Business #### What Are Plerion's Pros and Cons? **Pros:** - Security (11 reviews) - Ease of Use (10 reviews) - Customer Support (7 reviews) - Helpful (7 reviews) - Prioritization (6 reviews) **Cons:** - Improvements Needed (5 reviews) - Improvement Needed (4 reviews) - Missing Features (4 reviews) - Cloud Integration (2 reviews) - Integration Issues (2 reviews) ### What Do G2 Reviewers Say About Plerion? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **centralized security management** of Plerion, providing clear risk visibility and actionable insights. - Users love the **ease of use** of Plerion, appreciating its seamless integration and practical guidance for security management. - Users praise the **exceptional customer support** of Plerion, noting their responsiveness and genuine commitment to customer success. - Users appreciate the **immediate visibility and actionable advice** provided by Plerion, enhancing their security management efforts. - Users value the **effective prioritization** in Plerion, allowing focus on critical security issues without distraction. **Cons:** - Users note that **improvements are needed** in ongoing measurement tools and Jira ticket creation for better long-term value. - Users feel that Plerion needs **improvement in ongoing measurement** and enhanced features to maintain visible long-term value. - Users find the **missing features** in Plerion limit customization and cloud support, impacting their overall experience. - Users find the **limited support for Google Cloud** challenging, wishing for better integration with all cloud providers. - Users face **integration issues** due to manual updates and deployment friction with the new features in Plerion. #### What Are Recent G2 Reviews of Plerion? **"[Practical Cloud Security That Cuts Through the Noise](https://www.g2.com/survey_responses/plerion-review-13058031)"** **Rating:** 4.5/5.0 stars *— Hieu V.* [Read full review](https://www.g2.com/survey_responses/plerion-review-13058031) --- **"[Cuts Through Alert Noise with Contextual Risk Insights and an AI Cloud Security Engineer](https://www.g2.com/survey_responses/plerion-review-13102366)"** **Rating:** 5.0/5.0 stars *— Joshua K.* [Read full review](https://www.g2.com/survey_responses/plerion-review-13102366) --- ### 16. [RapidFort](https://www.g2.com/products/rapidfort/reviews) RapidFort is a unified CI/CD security platform that eliminates up to 95% of vulnerabilities without requiring code changes. We provide RF-Curated Near Zero CVE Images hardened to NIST 800-70 and FIPS 140-2 standards, RF SCA Scanner for fast and accurate vulnerability scanning, RF DevTime Protection with comprehensive SBOM/RBOM™ insights, and RF RunTime Protection that reduces your attack surface by up to 90%. Additionally, RF Justification for POAMs accelerates compliance workflows. Simplify your security and compliance with RapidFort. **Who Is the Company Behind RapidFort?** - **Seller:** [RapidFort](https://www.g2.com/sellers/rapidfort) - **Year Founded:** 2020 - **HQ Location:** Sunnyvale, US - **LinkedIn® Page:** https://www.linkedin.com/company/rapidfort (73 employees on LinkedIn®) ### 17. [Skyhigh Cloud-Native Application Protection Platform](https://www.g2.com/products/skyhigh-cloud-native-application-protection-platform/reviews) Skyhigh Cloud Native Application Protection Platform CNAPP is the industry’s first platform to extend Cloud Access Security Broker CASB, bringing application and data context to converge Cloud Security Posture Management CSPM with IaaS Data Loss Prevention DLP for IaaS public clouds. Skyhigh CNAPP provides consistent data protection, threat prevention, governance, and compliance throughout the cloud-native application development lifecycle. Skyhigh CNAPP is consolidated into a fully converged platform and managed from the same single console as the rest of the Skyhigh SSE services. **Average Rating:** 4.8/5.0 **Total Reviews:** 2 **How Do G2 Users Rate Skyhigh Cloud-Native Application Protection Platform?** - **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.0/10) **Who Is the Company Behind Skyhigh Cloud-Native Application Protection Platform?** - **Seller:** [Skyhigh Security](https://www.g2.com/sellers/skyhigh-security) - **Year Founded:** 2022 - **HQ Location:** San Jose, CA - **Twitter:** @skyhighsecurity (17,573 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/78449382 (751 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Mid-Market #### What Are Recent G2 Reviews of Skyhigh Cloud-Native Application Protection Platform? **"[A Comprehensive Analysis](https://www.g2.com/survey_responses/skyhigh-cloud-native-application-protection-platform-review-9996125)"** **Rating:** 4.5/5.0 stars *— Jhansi R.* [Read full review](https://www.g2.com/survey_responses/skyhigh-cloud-native-application-protection-platform-review-9996125) --- **"[Best Security](https://www.g2.com/survey_responses/skyhigh-cloud-native-application-protection-platform-review-9995507)"** **Rating:** 5.0/5.0 stars *— Abhijit S.* [Read full review](https://www.g2.com/survey_responses/skyhigh-cloud-native-application-protection-platform-review-9995507) --- ### 18. [Strong Network](https://www.g2.com/products/strong-network/reviews) Deploy secure development environments in minutes while protecting your assets and improving your DevOps efficiency. Strong Network's code development workspaces allow organizations to efficiently manage internal and external developers, protect source code, data, and credentials, as well as access real-time monitoring metrics to improve their IT efficiency and ensure compliance. From startups to large infrastructures; organizations who are looking to efficiently manage internal & external developers, protect their development assets, and improve their DevOps benefit from it. 1- Provide development environments that significantly improve developers' comfort, reducing any burden attached to their provisioning and maintenance, while not putting any restrictions on their customization. 2- Simplify and secure access to all data and resources necessary to a team of developers to create software and perform data science. 3- Implement and deploy policy-compliant DevSecOps practices across a workforce that reflects the complexities. **Who Is the Company Behind Strong Network?** - **Seller:** [Strong Network](https://www.g2.com/sellers/strong-network) - **Year Founded:** 2020 - **HQ Location:** Lausanne, CH - **LinkedIn® Page:** https://www.linkedin.com/company/strongnetworkinc (3 employees on LinkedIn®) ### 19. [Symantec Cloud Workload Protection](https://www.g2.com/products/symantec-symantec-cloud-workload-protection/reviews) Automate security for your public cloud workloads and containers, and scan Amazon S3 buckets for malware with cloud-native protection that integrates with DevOps and CI/CD pipelines **Average Rating:** 4.1/5.0 **Total Reviews:** 11 **How Do G2 Users Rate Symantec Cloud Workload Protection?** - **Has the product been a good partner in doing business?:** 1.7/10 (Category avg: 9.0/10) **Who Is the Company Behind Symantec Cloud Workload Protection?** - **Seller:** [Broadcom](https://www.g2.com/sellers/broadcom-ab3091cd-4724-46a8-ac89-219d6bc8e166) - **Year Founded:** 1991 - **HQ Location:** San Jose, CA - **Twitter:** @broadcom (63,909 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/broadcom/ (55,094 employees on LinkedIn®) - **Ownership:** NASDAQ: CA **Who Uses This Product?** - **Company Size:** 58% Mid-Market, 25% Small-Business #### What Are Recent G2 Reviews of Symantec Cloud Workload Protection? **"[Symantec worked well but I occasionally had issues](https://www.g2.com/survey_responses/symantec-cloud-workload-protection-review-7832268)"** **Rating:** 4.0/5.0 stars *— Thomas L.* [Read full review](https://www.g2.com/survey_responses/symantec-cloud-workload-protection-review-7832268) --- **"[One of the best cloud security programs out there!](https://www.g2.com/survey_responses/symantec-cloud-workload-protection-review-888305)"** **Rating:** 4.0/5.0 stars *— Paul A.* [Read full review](https://www.g2.com/survey_responses/symantec-cloud-workload-protection-review-888305) --- #### What Are G2 Users Discussing About Symantec Cloud Workload Protection? - [What is Symantec Cloud Workload Protection used for?](https://www.g2.com/discussions/what-is-symantec-cloud-workload-protection-used-for) ### 20. [Sypderbat](https://www.g2.com/products/sypderbat/reviews) Spyderbat is a cloud-native runtime security platform designed to detect, investigate, and respond to threats in hybrid and multi-cloud environments, including Kubernetes and Linux systems. Leveraging eBPF technology, Spyderbat provides continuous visualization of runtime application behavior from the kernel to the cloud, enabling organizations to reduce alert noise and automatically block attacks in real time. Key Features and Functionality: - Comprehensive Visibility: Utilizes eBPF agents to monitor all runtime activities across cloud systems and containers, forming a detailed behavioral web of system and user interactions. - Instant Detection and Response: Automatically identifies application drifts and linked symptoms of attacks, providing tools to automate responses and quickly determine root causes. - Reduced Alert Fatigue: Minimizes false positives by linking suspicious behaviors into continuous traces of activity, ensuring that only genuine threats are surfaced. - Low Resource Overhead: Operates with less than 2% agent overhead, ensuring minimal impact on system performance. Primary Value and Problem Solved: Spyderbat addresses the challenges of traditional security operations, which often involve manual, time-consuming investigations and an overwhelming volume of alerts. By continuously recording and analyzing runtime behaviors, Spyderbat provides immediate context and root cause analysis, significantly reducing investigation times from hours to minutes. This proactive approach enhances security posture, ensures higher uptime, and aligns with service level objectives and agreements. **Who Is the Company Behind Sypderbat?** - **Seller:** [Sypderbat](https://www.g2.com/sellers/sypderbat) - **Year Founded:** 2020 - **HQ Location:** United States - **LinkedIn® Page:** https://www.linkedin.com/company/spyderbat/ (19 employees on LinkedIn®) ### 21. [ThreatStryker](https://www.g2.com/products/threatstryker/reviews) ThreatStryker builds on the ThreatMapper open source platform. ThreatStryker extends the vulnerability discovery capabilities, adding runtime attack detection, prediction and protection. Map your applications, know the weak points, prioritise vulnerabilities for remediation. Observe security events (indicators of attack and indicators of compromise) using deep packet inspection and lightweight on-host sensors. Correlate events and vulnerabilities to track the risk posed by attacker behaviour, then intervene with quarantine and firewall actions to stop attackers in their tracks. **Average Rating:** 4.0/5.0 **Total Reviews:** 1 **Who Is the Company Behind ThreatStryker?** - **Seller:** [Deepfence](https://www.g2.com/sellers/deepfence) - **Year Founded:** 2018 - **HQ Location:** Palo Alto, US - **Twitter:** @deepfence (574 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/10487480 (6 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 100% Mid-Market #### What Are Recent G2 Reviews of ThreatStryker? **"[Vulnerability identification and attack monitoring](https://www.g2.com/survey_responses/threatstryker-review-9985185)"** **Rating:** 4.0/5.0 stars *— Ali M.* [Read full review](https://www.g2.com/survey_responses/threatstryker-review-9985185) --- ### 22. [Trickest Platform](https://www.g2.com/products/trickest-platform/reviews) Trickest provides an innovative approach to offensive cybersecurity automation, assets, and vulnerability discovery. The platform combines extensive adversary tactics and techniques with full transparency, hypercustomization, and hyperscalability, making it the go-to platform for offensive security operations. The Trickest platform comes with comprehensive tooling, scripting, managed infrastructure, scaling, ready-to-go solutions, and analytics, serving as a collaborative command center for Offensive Security, Penetration testing, Red teams, Security Analysts, and Security Service providers (MSSPs). What makes us different? Easy customization of logic, inputs, outputs, and integrations, making them adaptable to specific needs and thus producing superior-quality data compared to others. Some of the automation workflows and solutions that our customers deploy and execute: - Attack Surface Discovery - Vulnerability Scanning - Dynamic Application Security Testing (DAST) - Recon/Information Gathering (Passive & Active) - Organization OSINT - CVE scanning - Cloud Scanning - DNS recon & research - Subdomain Enumeration - Subdomain Takeover - Custom Security Automation and Orchestration Main components of the Trickest platform include: Solutions & Analytics - Ready-to-go and transparent solutions for Attack Surface Discovery, Vulnerability Scanning, Dynamic Application Security Testing (DAST), and Open-source intelligence OSINT, offering insight into every step of the process, easy customization, and Analytics on the top. The Builder - Access to 90+ workflow templates, 300+ open-source tools, Bash & Python scripting, CLI for building custom workflows to discover asset, vulnerabilities, scan network & apps, crawl, spider, enumerate, fuzz, bruteforce and much more. Hyperscalability - Whether scanning regional infrastructures with 100s of 1000s of assets or smaller organizational scopes, Trickest supports it all without per-asset costs. **Who Is the Company Behind Trickest Platform?** - **Seller:** [Trickest](https://www.g2.com/sellers/trickest) - **Year Founded:** 2020 - **HQ Location:** Dover, US - **LinkedIn® Page:** https://www.linkedin.com/company/trickest/ (12 employees on LinkedIn®) ### 23. [Veracode Container Security](https://www.g2.com/products/veracode-container-security/reviews) Veracode Container Security secures containers and infrastructure as code with a CLI tool that integrates into an existing CI/CD pipeline. **Who Is the Company Behind Veracode Container Security?** - **Seller:** [VERACODE](https://www.g2.com/sellers/veracode) - **Year Founded:** 2006 - **HQ Location:** Burlington, MA - **Twitter:** @Veracode (21,950 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/27845/ (502 employees on LinkedIn®) ### 24. [Wangsu Container Security](https://www.g2.com/products/wangsu-container-security/reviews) Wangsu Container Security is a comprehensive solution designed to safeguard containerized applications throughout their lifecycle. It integrates advanced security measures to protect against vulnerabilities and threats inherent in container environments, ensuring robust protection for modern cloud-native applications. Key Features and Functionality: - Comprehensive Threat Detection: Utilizes advanced algorithms to identify and mitigate potential security risks within containerized applications. - Real-Time Monitoring: Provides continuous surveillance of container activities, enabling prompt detection and response to security incidents. - Automated Compliance Management: Ensures adherence to industry standards and regulations by automating compliance checks and reporting. - Seamless Integration: Easily integrates with existing DevOps workflows and CI/CD pipelines, facilitating efficient security management without disrupting development processes. Primary Value and Problem Solved: Wangsu Container Security addresses the critical need for robust security in containerized environments. By offering real-time threat detection, continuous monitoring, and automated compliance, it empowers organizations to deploy and manage containerized applications securely. This solution mitigates risks associated with container vulnerabilities, ensuring the integrity and reliability of applications in dynamic cloud-native infrastructures. **Who Is the Company Behind Wangsu Container Security?** - **Seller:** [Nets Technology Co., Ltd.](https://www.g2.com/sellers/nets-technology-co-ltd) - **HQ Location:** Shangai. China - **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®) ## What Is Container Security Tools? [DevSecOps Software](https://www.g2.com/categories/devsecops) ## What Software Categories Are Similar to Container Security Tools? - [Vulnerability Scanner Software](https://www.g2.com/categories/vulnerability-scanner) - [Cloud Workload Protection Platforms](https://www.g2.com/categories/cloud-workload-protection-platforms) - [Cloud Compliance Software](https://www.g2.com/categories/cloud-compliance) - [Cloud Security Monitoring and Analytics Software](https://www.g2.com/categories/cloud-security-monitoring-and-analytics) - [Cloud Security Posture Management (CSPM) Software](https://www.g2.com/categories/cloud-security-posture-management-cspm) - [Cloud-Native Application Protection Platform (CNAPP)](https://www.g2.com/categories/cloud-native-application-protection-platform-cnapp) - [Cloud Detection and Response (CDR) Software](https://www.g2.com/categories/cloud-detection-and-response-cdr)