Red Hat Advanced Cluster Security

OpenShiftSecurity

Kubernetes-native runtime threat detection, vulnerability management, and supply-chain security (formerly StackRox) covering build, deploy, and runtime phases

Jurisdictional exposure

Provider HQ
USRaleigh, USA

Subject to CLOUD Act, FISA-702, DPF

Sovereign option
No sovereign-flagged regions in the catalogue for this service.

Sub-services (3)

Runtime Detection

Behavioural detection of anomalous container activity

Vulnerability Management

CVE scanning across images, deployed workloads, and node OS

Network Policy Generation

Auto-generated NetworkPolicies based on observed traffic

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

Tags

Equivalent services on other platforms

Alibaba Security CenterAlibaba

Unified security operations platform covering vulnerability management, malware detection, baseline configuration scanning, log audit, container image scanning, and compliance posture across Alibaba Cloud and hybrid workloads

Amazon GuardDutyAWS

Intelligent threat detection service that continuously monitors CloudTrail, VPC flow logs, and DNS logs using ML and curated threat intelligence feeds

Amazon InspectorAWS

Automated vulnerability management service that continually scans EC2, Lambda, and container images for software vulnerabilities and unintended network exposure, delivering prioritised findings with contextual risk scoring

AWS Security HubAWS

Cloud security posture management service that aggregates, prioritises, and responds to findings from GuardDuty, Inspector, Macie, IAM Access Analyzer, and 60+ third-party partners against CIS, PCI DSS, and AWS Foundational best practices

Microsoft Defender for CloudAzure

Unified cloud security posture management (CSPM) and cloud workload protection (CWPP) platform with compliance dashboards, secure score, and regulatory standards assessments

Security Command CenterGCP

Centralised security and risk management platform for GCP with asset inventory, vulnerability scanning, threat detection, compliance reporting, and security posture dashboards

IBM Cloud Security and Compliance CenterIBM

Unified CSPM and compliance posture service covering IBM Cloud and hybrid-cloud estates, with built-in scans against CIS Benchmark, FS Cloud Controls, NIST 800-53, and custom profiles, plus findings aggregation into IBM QRadar

OCI Cloud GuardOracle

Continuous security-posture monitoring across the OCI tenancy. Detector recipes flag misconfigurations and suspicious activity; responder recipes automate remediation (revoke, notify, suspend).

OCI Application Dependency ManagementOracle

Software-supply-chain scanner that inspects application dependencies (Maven, npm, PyPI, NuGet, RubyGems, Go modules) for known CVEs, builds an SBOM per app, and integrates into OCI DevOps pipelines to block deploys on unresolved vulnerabilities

OCI Vulnerability ScanningOracle

Scans compute hosts and container images for vulnerabilities, open ports and CIS benchmark issues, and reports findings into Cloud Guard.

Pricing

Pricing model:subscription-per-node