Provides enterprise-grade, open-source container images built on minimal Ubuntu distributions, removing unnecessary packages to reduce vulnerabilities and operational overhead. Each image is generated with signed provenance and accompanying Software Bill of Materials (SBOMs) for transparent component verification, enabling secure and efficient cloud-native development. This approach minimizes CVEs, streamlines security processes, and enhances developer productivity by reducing scanning noise.
Funding
Funding not disclosed
Founders
Product
Problem
Organizations face challenges in securing their software supply chains due to vulnerabilities and malware present in open-source components. Traditional Linux distributions often include unnecessary packages in container images, leading to increased attack surfaces and operational overhead for security teams.
Solution
KoalaLab provides enterprise-grade, open-source container images built on minimal Ubuntu distributions, removing unnecessary packages to reduce vulnerabilities and operational overhead. These hardened images are packaged from source with signed provenance and generated Software Bill of Materials (SBOMs) for transparent component verification. By minimizing Common Vulnerabilities and Exposures (CVEs) and streamlining security processes, KoalaLab enhances developer productivity, allowing them to focus on shipping software. The platform offers a wide range of cloud-native OSS images that are prominent and important in the container era, built on a familiar Linux distro.
Target Audience
KoalaLab targets platform/DevOps teams and CISOs seeking to reduce CVE management overhead, ease compliance burdens, and secure their software supply chains with hardened container images.
Features
- Minimal container images built on Ubuntu with only the packages required for running the container
- Reduced vulnerabilities by removing unnecessary packages that create security overhang
- Signed provenance and SBOMs generated at image creation for component verification
- Hardened images designed to ease compliance with FedRAMP and PCI-DSS
- Tooling for creating custom images based on familiar Debian packages