Red Hat buys Kubernetes security player StackRox

BREAKING — Crimson Hat will integrate Kubernetes protection program into its OpenShift platform with the acquisition of StackRox.

Crimson Hat strategies to open up resource StackRox’s proprietary resource code, with timing to be decided afterwards, according to a press launch. StackRox launched KubeLinter, an open up resource venture that analyzes Kubernetes YAML documents and Helm charts to be certain suitable configurations, in Oct.

Terms of the acquisition weren’t disclosed. Crimson Hat expects to finish it this quarter.

Container protection, the place StackRox bought its commence in 2014, has introduced or enabled new IT protection techniques in general, from compliance as code to DevSecOps. Containers lend on their own to immutable or repeatable infrastructure deployment styles, which are seen as extra protected because they are not vulnerable to faults in updates and patching — in the case of immutable infrastructure — or human error in the case of automated repeatable deployments, significantly when IT professionals use them as component of a GitOps strategy.

Kubernetes protection in unique has been at the middle of discussions amongst enterprises with the container orchestration platform in production over the previous six months, significantly in terms of no matter whether upstream defaults need to be changed with 3rd-celebration professional tasks. Some upstream Kubernetes protection parts, such as Pod Protection Policies, have languished and will be deprecated in favor of new approaches, the group made a decision previous thirty day period.

StackRox and opponents such as NeuVector pivoted from a container protection aim in 2018 to a Kubernetes-specific just one. StackRox was amongst the to start with to deploy its program for container runtime protection as a privileged DaemonSet in just Kubernetes infrastructure.

This means StackRox program can be instantly and persistently injected into each individual Kubernetes cluster as it can be deployed. That was a advertising position for early adopters such as retail program maker Aptos, video clip streaming startup Mux Inc. and fintech company Greenlight.

StackRox also provides container protection scanning in just CI/CD pipelines for DevSecOps deployments, an strategy favored by enterprise buyers such as Informatica.

StackRox will carry on to support various Kubernetes products, together with Amazon EKS, Microsoft Azure Kubernetes Assistance and Google Kubernetes Motor, and will never be minimal just to OpenShift buyers.

Current StackRox buyers will carry on to acquire support from StackRox until finally the acquisition closes, and then will be shifted to Crimson Hat support, according to a company FAQ.

Reporting in progress — total tale to observe.