Prisma Cloud cloud workload protection delivers cloud native security and compliance coverage throughout the entire development lifecycle regardless of the underlying compute technology.
Prisma Cloud secures hosts, containers, and serverless with cloud workload protection (CWP) for Red Hat environments and also defends the cloud attack surface with an in-depth Web Application and API Security (WAAS) capability, integrates vulnerability and compliance scanning directly into CI/CD workflows, and simplifies your cloud monitoring with Red Hat-specific integrations.
Prisma Cloud uses an integrated approach enabling security operations and DevOps teams to collaborate effectively and accelerate secure cloud-native application development across the entire lifecycle. Brought to you by Palo Alto Networks, Prisma Cloud is shaping the cloud-centric future with continuous security innovation in AI, analytics, automation, and orchestration.
Cloud workload protection (CWP) key features:
* Host Security: Secure virtual machines on any public or private cloud
* Container Security: Secure OpenShift, Kubernetes, and other container platforms
* Serverless Security: Secure serverless functions across the full application lifecycle
* Web Application and API Security: Protect against Layer 7 and OWASP Top 10 threats
Vulnerability Detection and Prevention
Identify vulnerable images across your environment with alerting and enforcement policies covering the entire CI/CD process. Prisma Cloud uses Red Hat-specific vulnerability data, resulting in precise, layer-aware vulnerability analysis.
Compliance Management
Users can easily monitor compliance for Docker, Kubernetes, and Linux against CIS Benchmarks, as well as external compliance standards and custom requirements with prebuilt 1-click enforcement for single pane of glass compliance.
Runtime Defense
Protect OpenShift environments at scale with ML that automatically creates runtime models for every image in every pod in OpenShift, hunts for anomalies, prevents attacks, delivers continuous forensics for every container and host in your cloud.
Advanced Threat Intelligence
Aggregated vulnerability data from more than 30 sources along with our internal threat labs, including built-in coverage of Red Hat CVEs, and custom-developed and tested seccomp policies for common OpenShift workloads.
Access Control
Establish and monitor access control measures for OpenShift clusters, Docker and Kubernetes while integrating with identity and access management (IAM) and secrets management tools, along with other core technologies.
Open Container Standards Support
Support open container standards like runC and containerd, and work with runtimes including Docker, cri-o and cri-containerd.
