Sysdig collaborates with Snyk to deliver end-to-end container security

Sysdig and Snyk announced the integration of Sysdig Secure with Snyk Container to cover container security from development through operations.

Based on initial internal testing, this integration allows teams to eliminate up to 95 percent of vulnerability alerts using runtime intelligence from Sysdig Secure with Snyk Container.

With this partnership, Sysdig and Snyk bring together the container runtime and developer security tools, for the first integration that bridges developer, DevOps, and SecOps silos. Sysdig runtime context provides Snyk users the ability to quickly pinpoint exploitable packages that are active in production applications.

The integration aligns developer, operations, and security teams on which vulnerabilities to prioritize fixing first, focusing scarce developer resources on the biggest risks.

Today’s container security reality: Balancing risk reduction with developer agility

• Developers are overwhelmed with vulnerabilities and don’t know where to focus remediation efforts. Attempting to wade through the unmanageable number of issues is noise that takes precious time away from coding and leaves organizations open to risk. By understanding business impact, as well as severity score, teams can fix the most critical issues first.
• Security and operations teams responsible for monitoring the runtime environment need the container and Kubernetes visibility required to flag newly identified vulnerabilities for workloads running in production. They also need to detect threats attacking vulnerabilities that have not been fixed, and to stay ahead of zero-day exploits.

Sysdig’s unique container visibility and threat protection and Snyk’s developer-first tooling pair accurate runtime threat protection with early detection and vulnerability management. By bringing this information into the development pipeline, Sysdig and Snyk are in a unique position to help development teams instantly eliminate up to 95 percent of the vulnerabilities that would otherwise demand their attention.

Bridging the gap: Sysdig + Snyk

Sysdig and Snyk’s new collaboration helps organizations more effectively remove the security barriers that stand in the way of faster innovation.

This is accomplished by:

• Securing the entire container lifecycle: Every aspect of the container and Kubernetes lifecycle is now covered — from the most secure base images to detecting and prioritizing which vulnerabilities require attention, to monitoring running workloads for real-time threats and new vulnerabilities.
• Building securely from the start: Snyk’s security insights and automated remediation are seamlessly integrated to more easily find, prioritize, and fix vulnerabilities in containers and open source dependencies.
• Protecting against runtime threats: Sysdig’s runtime security, based on open source Falco, detects threats across containers and Kubernetes, and captures detailed activity, enabling teams to accelerate incident response.
• Prioritizing the security alerts that matter most: With the integration of Snyk and Sysdig, organizations can quickly pinpoint exploitable packages that are active in production applications. This enables organizations to prioritize container vulnerabilities that pose the greatest risk, reducing noise and overall risk to gain developer speed and efficiency.

“For too long, developers have been tasked with the impossible: fighting the unrelenting vulnerability noise that compromises both their speed as well as their company’s overall security. Together with Sysdig, we’re now empowering millions more developers worldwide to innovate securely. We’re excited for what’s ahead as together we advance the global DevSecOps movement in 2022 and beyond,” said Peter McKay, Chief Executive Officer, Snyk.

“The deep visibility available with Sysdig’s runtime security and Snyk’s developer-first tooling enables developer, DevOps, and security teams to achieve better alignment so they can manage risk without delaying software releases. The increase in productivity helps drive innovation, cost savings, revenue growth, and customer satisfaction,” said Suresh Vasudevan, Chief Executive Officer, Sysdig.