Attack surface management company Intruder Solutions Ltd. today announced the release of Container Image Scanning, an upgrade that automatically scans container images for vulnerabilities.

Offered as part of Intruder’s existing platform and available to Intruder Cloud, Pro and Enterprise subscribers, Container Image Scanning gives customers clear, actionable insight into container risk without the need to deploy and maintain scanning agents across their estates.

As part of the new offering, Intruder now supports Amazon Web Services Elastic Container Registry, Google Cloud Artifact Registry and Azure Container Registry.

New images and updated versions are scanned daily for vulnerabilities. Users can view the results in a single, prioritized list alongside other vulnerabilities, attack surface issues and misconfigurations detected by Intruder.

Key benefits of Container Image Scanning include no agents being required. The service uses registry-level integrations with cloud providers and detection before execution, since unlike agent-based approaches, registry-level scanning allows customers to detect issues before the image runs in production.

Customers also benefit from noise reduction, as the new service uses tags to focus on images that are actually in use in cloud environments, cutting out noise from old, unused, or deprecated images and surfacing only the risks that matter.

Other features include coverage across all environments, including functions as a service such as AWS Lambda, containers as a service such as AWS ECS, or directly inside virtual machines that also need to be scanned to avoid risks.

Managed service image scanning also extends coverage to images that are deployed to managed container services, where customers don’t have access to the underlying nodes with those services and as a result, couldn’t previously deploy an agent.

“Containerized environments are everywhere and security solutions need to adapt accordingly,” said Andy Hornegold, vice president of product at Intruder. “They’re a big, complicated attack surface, and this release extends our attack surface and cloud coverage into one of the most critical parts of modern infrastructure, giving teams continuous visibility into container vulnerabilities with minimal effort and strong signal-to-noise control.”

Image: Intruder