Red Hat Advanced Cluster Security for Kubernetes provides an integrated platform that secures container workloads across the full development‑to‑runtime lifecycle. It scans images in CI/CD pipelines, enforces policy‑based controls, continuously monitors clusters for configuration drift and runtime threats, and delivers compliance reporting and network segmentation through a centralized console and open APIs for hybrid and multi‑cloud environments.
Funding
Funding not disclosed
Founders
Product
Problem
Enterprises running containerized workloads on Kubernetes often lack unified visibility and control across hybrid and multi‑cloud environments, making it difficult to enforce consistent security policies, detect runtime threats, and secure the software supply chain.
Solution
Red Hat Advanced Cluster Security for Kubernetes delivers an integrated platform that secures the entire lifecycle of container workloads. It scans container images in CI/CD pipelines, applies policy‑based controls early in development, and continuously monitors clusters for configuration drift and anomalous behavior at runtime. The solution provides Kubernetes security posture management (KSPM) with automated compliance checks, network segmentation, and threat detection powered by machine‑learning analytics. Results and alerts are exposed through a centralized console and APIs that integrate with Red Hat OpenShift, other orchestration tools, and existing SIEMs, enabling security and operations teams to enforce consistent protection across on‑premises, public cloud, and edge deployments.
Target Audience
The primary customers are enterprise DevSecOps, platform engineering, and security operations teams that manage Kubernetes or OpenShift clusters across hybrid and multi‑cloud infrastructures.
Features
- Image scanning and provenance verification integrated into popular CI/CD tools (Jenkins, GitLab, Tekton) with policy enforcement before deployment
- Kubernetes security posture management that continuously evaluates cluster configurations against CIS Benchmarks, NIST, and custom policies
- Runtime defense engine that monitors system calls, network flows, and container behavior to detect anomalies and block attacks in real time
- Automated network segmentation and micro‑policy enforcement using eBPF‑based visibility and enforcement layers
- Centralized console with drill‑down dashboards, compliance reporting, and role‑based access control (RBAC) for security, DevOps, and audit teams
- Open, standards‑based APIs (REST, gRPC) and native integration with Red Hat OpenShift, enabling policy as code and seamless data export to SIEMs and ticketing systems
- Multi‑cloud and edge support with consistent policy enforcement across on‑premises, AWS, Azure, GCP, and hybrid environments
- Machine‑learning models that prioritize alerts and provide risk scores to reduce alert fatigue and accelerate incident response