Protecting Virtual Machines in Cloud Native Environments with VMClarity

We are introducing exciting new additions to open source projects addressing cloud native application security.

Virtual machines (VM’s) are the number one most used service on AWS, Azure and GCP and the predominant method for hosting containers. Despite this extensive use, VM’s are vulnerable to multiple threats including leaked secrets and passwords, malware, system misconfiguration, and rootkit software used by cybercriminals to gain control over a target computer or network.

There are good open source and commercial-based solutions for providing threat detection for virtual machines, but challenges come with assembling these yourself:

Cloud and container environments are complex with installation, configuration, and reporting.
Integrating with existing deployment automation is always a consideration with any addition to a cloud native environment.
Siloed reporting and visualization and a lack of a single view into your configuration.
No single solution that integrates container and VM security across multi-cloud, on-premises, and hybrid deployment scenarios.

Protecting Your Virtual Machines in a Multi-Cloud Cloud Native Environments with VMClarity

Introducing VMClarity!

VMClarity is an open-source tool for agentless detection and management of Software Bill of Materials (SBOMs) on Virtual Machines (VMs). Because it is agentless, cloud native security and observability on VMs is enhanced without writing or modifying any code.

VMClarity works in multicloud environments to provide the following:

Software Bill of Materials (SBOM) analysis
Package & OS vulnerability detection
Exploit detection
Leaked secret detection
Malware detection
Misconfiguration detection
Rootkit detection

Get started!

Visit the open source project on GitHub. You can learn more about the project, start using, and contribute.

Read the blog and watch the videos of VMClarity in action.

Kim McMahon is a head of community and open source marketing in Cisco’s Emerging Technology & Incubation organization. You can follow her on Twitter @kamcmahon