One thing I like about this tool is the ease of use when scanning of vulnerabilities. This can easily be deployed with Kubernetes and Docker. Easy to use with enterprise distros like Red Hat. I really like how easy it is to set up on your machine. It takes only a few minutes with a Docker container to launch the platform. Review collected by and hosted on G2.com.

What do you dislike about CoreOS Clair?

It is an open source tool and not exactly reliable. There are updates that get launched for the tool; but there is no knowing whether the tool is completely up to date. It is not in a stable state for long term use and can require a lot of administration in order to support it. Review collected by and hosted on G2.com.

Recommendations to others considering CoreOS Clair:

For anyone using CoreOS; I strongly recommend using AWS services as well as Red Hat enterprise; this is a great tool to implement into this kind of architecture. Review collected by and hosted on G2.com.

What problems is CoreOS Clair solving and how is that benefiting you?

We are using CoreOS for vulnerability assessment. I am using this tool with Docker; in order to launch this tool on various servers; that way it can be used for vulnerability assessments. Benefits I have realized are that if you are already an AWS and Red Hat user; this tool is easy to set up. Review collected by and hosted on G2.com.

UR

Verified User in Retail

Enterprise (> 1000 emp.)

5/17/2019

"State-of-the-Art Static Analysis for Vulnerabilities"

4/5

What do you like best about CoreOS Clair?

When updates to vulnerability metadata occur, a notification is sent to alert systems that a change has occurred, and can be therefore fixed. Review collected by and hosted on G2.com.

What do you dislike about CoreOS Clair?

As a CoreOS Clair user, I'd like to have CoreOS Clair to return vulnerable ancestry changes instead of computing that on Client side. Review collected by and hosted on G2.com.

UC

Verified User in Computer & Network Security

Enterprise (> 1000 emp.)

4/9/2019

"Clair is an easy way to scan container for vulnerabilities"

5/5

What do you like best about CoreOS Clair?

I like how easy it is to scan containers for vulnerabilities. You can point an image at it and it will give you a full report. Review collected by and hosted on G2.com.

What do you dislike about CoreOS Clair?

I dislike that it's only static analysis, but it does get the job done. Review collected by and hosted on G2.com.

Recommendations to others considering CoreOS Clair:

You may have to script up a wrapper around the tool to use for CI/CD, but it's definitely worth it. Review collected by and hosted on G2.com.

What problems is CoreOS Clair solving and how is that benefiting you?

We needed a way to scan images during CI/CD before we pushed them to our master registry. Clair fit right into our pipeline and we can fail a build if it fails a the vulnerability scan. Review collected by and hosted on G2.com.