In this service, Spike Reply will assess the container lifecycle security of your existing cloud infrastructure. We use a combination of tool-based security scans and manual reviews to give you fundamental insights into your existing container pipelines, compiling our findings in a detailed assessment report with actionable next steps. We offer expertise in cloud security to help you build the most secure cloud for your needs.

Our Approach

At Spike Reply, we believe in establishing security by design. As 2022 AWS Security Partner of the Year and System Integration Partner of the Year, for this offering we partner with Trend Micro, the 2022 AWS Marketplace Partner of the Year, to strengthen our customers’ cloud security. We follow a layered approach covering cloud security best practices, AWS specific best practices and well-architected framework, industry-specific standards and company-specific policies or controls.

For this service, we use Trend Micro’s Cloud One Container Security. Cloud One Container Security provides security for your containers through all stages of their lifecycle. The two main components are container image scanning before runtime and policy-based deployment controls, helping to ensure continuous compliance and continuous runtime security.

Key Activities

• Set up Cloud One Container Security for your existing cloud infrastructure
• Review current container architecture and infrastructure, including container orchestration tools, container registry, and container runtime
• Assess current security practices for containers and the container ecosystem, and provide recommendations for improving security through the development and deployment process
• Identify opportunities for implementing automation and continuous integration/continuous delivery (CI/CD) practices for container deployments
• Identify any potential compliance issues, risks as well as potential vulnerabilities and provide guidance on how to address them through the development and deployment process
• Develop appropriate remediation methods and next steps to improve your security posture

What you will receive

• Running Proof of Concept with Trend Micro Cloud One Container Security
• Assessment report detailing the findings of the container security assessment
• Roadmap and recommendations for future actions