Hacker releases agentless container image scan of cloud environments

The attack site management company Intruder Solutions Ltd. today announced the release of Container Image Scanning, an enhancement that automatically scans container images for vulnerabilities.

Offered as part of the existing Intruder platform and available to Intruder Cloud, Pro and Enterprise subscribers, Container Image Scanning gives customers a clear, tangible understanding of container risk without the need to deploy and maintain scanning agents across their premises.

As part of the new offering, Intruder now supports Amazon Web Services Elastic Container Registry, Google Cloud Artifact Registry and Azure Container Registry.

New images and updated versions are scanned daily for vulnerabilities. Users can view the results in a single list, prioritized in relation to other vulnerabilities, attack surface issues and vulnerabilities detected by Intruder.

Key advantages of Container Image Scanning include no agents required. The service uses subscription-level integration with cloud providers and pre-execution detection, as unlike agent-based methods, subscription-level scanning allows customers to detect problems before the image starts production.

Customers also benefit from noise reduction, as the new service uses tags to focus on images that are actually used in the cloud environment, cutting noise from old, unused, or withdrawn images and only revealing important vulnerabilities.

Other features include deployment in all environments, including jobs as a service such as AWS Lambda, containers as a service such as AWS ECS, or directly within virtual machines that need to be scanned to avoid accidents.

Managed service image scanning also extends coverage to images used in managed container services, where clients cannot access the subnodes that host those services and therefore, could not previously deploy an agent.

“Boxed environments are everywhere and security solutions need to adapt accordingly,” said Andy Hornegold, vice president of product at Intruder. “They are a large and complex attack surface, and this release expands our attack surface and cloud coverage into one of the most important parts of a modern infrastructure, giving teams continuous visibility into container vulnerabilities with minimal effort and tighter control over noise.”

Image: Criminal