Vulnerability Management

Securing cloud-native applications requires a comprehensive view into vulnerabilities across the application lifecycle. Prisma Cloud delivers a centralized view into vulnerabilities across public cloud, private cloud and on-premises environments for every host, container and serverless function.

• Code to cloud visibility

  Gain visibility into all vulnerabilities across your environment — source packages, git repos, registries, deployed images, hosts and running applications.

• Flexible deployment options.

  Gain visibility into vulnerability across virtual machines, containers, kubernetes and serverless functions with agents and agentless scanning.100% continuous coverage for any application in any cloud environment.

• Manage risk from a single UI.

  Visualize risk across host OS, container images and serverless functions with intelligent risk scoring.

Address and remediate vulnerabilities before they can be exploited by malicious actors through a systematic and proactive approach.

• See vulnerability status with remediation guidance.

  View every CVE with details and up-to-date vendor fix information, supporting all cloud-native technologies.

• Remediate critical vulnerabilities.

  Get context and remediation steps to developers to reduce friction and the meantime to remediate (MTTR).

• Alert on or prevent vulnerabilities across environments.

  Set precise policies to alert on or prevent vulnerable components from running on your environments.

• Integrate data with your existing systems.

  Integrate vulnerability alerts into common endpoints, including JIRA®, Slack®, PagerDuty®, Splunk®, Cortex® XSOAR™and ServiceNow®.

Built on top of the most reputable vulnerability databases and connected to the industry’s most robust infrastructure policy database, Prisma Cloud Software Composition Analysis (SCA) surfaces vulnerabilities with the context developers need to understand risk and implement fixes fast. Prisma Cloud provides the breadth and depth of open source coverage you need to stop the next big vulnerability in its tracks:

• Scan across languages and package managers with unmatched accuracy.

  Identify vulnerabilities in open-source packages with support for popular languages and more than 30 upstream data sources to minimize false positives.

• Leverage industry-leading sources for complete open-source security confidence.

  Scan open-source dependencies wherever they are and compare them against public databases like NVD and the Prisma Cloud Intelligence Stream to identify vulnerabilities and surface important fix information.

• Connect infrastructure and application risks.

  Zero in on vulnerabilities exposed in your codebase to combat false positives and prioritize remediations faster.

• Identify vulnerabilities at any dependency depth.

  Ingest package manager data to extrapolate dependency trees to the furthest layer to identify open-source risk hidden from view.

• Visualize and catalog your software supply chain.

  Visualize your pipelines, code and all connections. Generate a software bill of materials to keep track of application risk and understand your attack surface.