Sold by: ARMOÂ
ARMO Kubernetes Security Platform is a contextual end-to-end Kubernetes-native Security solution. It is the enterprise version of Kubescape, a leading Kubernetes security open-source project, (a CNCF sandbox project). ARMO platform empowers Kubernetes security practitioners to identify and automatically fix misconfigurations and vulnerabilities throughout the entire CI/CD pipeline from code to cluster. It streamlines the automation of Kubernetes compliance requirements, safeguards workloads in runtime, and allows exploration of RBAC in a whole new way.
The ARMO platform secures all kinds of Kubernetes deployments, including EKS, GKE, AKS, OpenShift, Tanzu, and On-premise.
Overview
ARMO Kubernetes Security Platform uniquely specializes in Kubernetes security. Designed to equip Security and DevOps teams with noise-free, contextual, and actionable security insights. It empowers Kubernetes security professionals to identify and automatically fix misconfigurations and vulnerabilities throughout the entire CI/CD pipeline from code to cluster. It streamlines the automation of Kubernetes compliance requirements, safeguards workloads in runtime, and allows exploration of RBAC in a whole new way.
By combining context from the Kubernetes control plane, runtime insights, and specific workload data, the ARMO Platform eliminates the security noise in clusters from thousands of alerts to high-priority threat vectors. It empowers Kubernetes security professionals to dare to remediate security issues without breaking running applications. As a result, teams are not only able to save significant resources and maintain application delivery and agility levels but also bring their Kubernetes security effectiveness to a new level.
The ARMO platform is a multi-cluster single-pane-glass for all kinds of Kubernetes deployments, including EKS, GKE, AKS, OpenShift, Tanzu, and On-premise.
Highlights
- Dedicated, contextual, end-to-end Kubernetes-native security platform
- Eliminate the security noise in your clusters from thousands of alerts to high-priority threat vectors
- Remediate security issues without breaking applications
Details
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on contract duration. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Dimension | Description | Cost/month |
|---|---|---|
SaaS offering: price per worker node | The price is per worker node per month (monthly or annual contract) | $29.00 |
Vendor refund policy
No refund
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
ARMO guarantees 99.99% uptime across two delivery regions and provides support with a response time of 8 hours (Sunday - Friday, 9:00am -5:00pm). You will be assigned a technical account manager and a secondary point of contact, and will have access to them through in-product chat and email.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Customer reviews
Jim R.
ARMO brought our team closer and made client interactions feel more personal
Reviewed on Feb 27, 2025
Review provided by G2
What do you like best about the product?
I enjoy that ARMO Platform helps us manage our projects more efficiently. The dashboard creates a visible summary of project status so personnel will not need to search through many messages or emails. The reporting tool saves us three hours per week because it creates detailed reports instantly with basic commands. The easy method for assigning work and monitoring progress helps us a lot.
What do you dislike about the product?
ARMO Platform suffers technical problems most often during file uploads of big sizes. The project work stops without warning during your work. ARMO stops working properly at times during file uploads. The system fails to show recent updates sometimes which creates unclear situations for users. A team member may think a task is finished but the system has not yet refreshed the update so team members get confused.
What problems is the product solving and how is that benefiting you?
We wasted many hours looking for approval responses through email before using ARMO Platform. Now, it’s instant. Through the platform we can delegate work and monitor its development from a single platform. The platform has decreased our email overload while making us more responsive. The system helped us solve two major difficulties including deadline monitoring. Our team used to drop some tasks but ARMO Platform sends us alerts which prevents us from forgetting anything. The system has simplified our work routines and made us operate faster.
Leave a comment0 comments
Atanu D.
Best tool for Kubernetes security
Reviewed on Feb 09, 2025
Review provided by G2
What do you like best about the product?
I recently started using ARMO, ( which uses Kubescape), it is very simple to get started and covers various compliance needs, besides I like the attack paths, CVE etc. Compared to other products in the market, it is priced reasonably and works very well with any cloud provider.
You need ARMO if you have set Kubernetes cluster on the cloud, to verify the configurations, remove various security issues, and identify various compliance violations. Once these are fixed, it is easy for SOC2 or other compliance.
ARMO also has a remediation option against each issue, which is kind of nice, and helps to pinpoint what additional controls to add to the YAML files.
You need ARMO if you have set Kubernetes cluster on the cloud, to verify the configurations, remove various security issues, and identify various compliance violations. Once these are fixed, it is easy for SOC2 or other compliance.
ARMO also has a remediation option against each issue, which is kind of nice, and helps to pinpoint what additional controls to add to the YAML files.
What do you dislike about the product?
Overall I like the platform, A few areas that can be improved are, applying a fixed configuration directly from the platform, rather than downloading the yaml and applying it yourself.
Besides, there are cases where the docker image you have used has transient dependencies that have open CVEs, but often upgrading to a newer version may not be the correct solution and can cause incompatibility. I feel, if ARMO provides an option to take chainguard or similar images, that would be better, without changing the version.
Besides, there are cases where the docker image you have used has transient dependencies that have open CVEs, but often upgrading to a newer version may not be the correct solution and can cause incompatibility. I feel, if ARMO provides an option to take chainguard or similar images, that would be better, without changing the version.
What problems is the product solving and how is that benefiting you?
Mainly ARMO has helped me identify the open issues in the configuration, docker images, and overall configuration issues within few minutes. It has also provided me ways to fix the issue.
Ala M.
Our projects have never run so smoothly, thanks to ARMO Platform
Reviewed on Feb 06, 2025
Review provided by G2
What do you like best about the product?
The automation features of ARMO Platform stand out as remarkable capabilities. The Platform performs its tasks by reducing hand labor which frees up at least one day of work during each week. The main benefit of the ARMO Platform lies in its capability to integrate with our existing tools. Automation capabilities founded in the ARMO Platform represent an outstanding feature through its capability to gather data from different sources then present it in one unified dashboard. This single feature allows our team to save three hours of reporting work each week.
What do you dislike about the product?
Users need to spend time adapting to the robust features of the ARMO Platform due to its complex interface structure. I regularly search for specific settings or configurations within the ARMO Platform. A few integration issues between ARMO Platform and our current tools created minor system disruptions.
What problems is the product solving and how is that benefiting you?
Through ARMO Platform we have resolved our fundamental issue for managing security across our diverse multi-cloud environment. Security policies and visibility gaps proved to be constant issues that our organization dealt with before implementing ARMO Platform. Through ARMO we can finally observe our entire security environment from a single perspective. The platform improved our security but at the same time streamlined our compliance procedures. The network monitoring function provides round-the-clock security protection which functions similarly to having a private guard service for our network infrastructure.
Consulting
Excellent deep dive
Reviewed on Feb 02, 2025
Review provided by G2
What do you like best about the product?
The platform is ituitive and the most importantly guide you to the solution of the issues highlighted. It was easy to integrate with my existing clusters
What do you dislike about the product?
There is a learning curve and on-going licence fees may become an issue over time.
What problems is the product solving and how is that benefiting you?
dentifying vulnerabilities: Detecting misconfigurations, weak secrets, and unauthorized access.
Enforcing policies: Automatically blocking risky deployments and enforcing security best practices.
Improving compliance: Meeting industry standards like CIS Benchmarks and NIST.
Enforcing policies: Automatically blocking risky deployments and enforcing security best practices.
Improving compliance: Meeting industry standards like CIS Benchmarks and NIST.
Dylan P.
Very good tool to secure your kubernetes cluster
Reviewed on Jan 06, 2025
Review provided by G2
What do you like best about the product?
Armo is perfect for reading kubescape reports.
The two tools integrate very well, and the armo dashboard allows you to push the use and understanding of kubescape dashboard to the limit.
I also really like the ease with which the various scans (registry, repository, cluster) can be integrated.
The interface is very pretty and easy to understand. All useful information is displayed on the screen, and fixes for the various vulnerabilities are easy to copy and apply, which saves an enormous amount of time.
The various sorting functions are very practical.
I also like the fact that it's easy to accept the risks.
Translated with DeepL.com (free version)
The two tools integrate very well, and the armo dashboard allows you to push the use and understanding of kubescape dashboard to the limit.
I also really like the ease with which the various scans (registry, repository, cluster) can be integrated.
The interface is very pretty and easy to understand. All useful information is displayed on the screen, and fixes for the various vulnerabilities are easy to copy and apply, which saves an enormous amount of time.
The various sorting functions are very practical.
I also like the fact that it's easy to accept the risks.
Translated with DeepL.com (free version)
What do you dislike about the product?
I don't like the idea of paying per node. In my case, I have a lot of small nodes with very different uses and resources. It's ideal for me to separate the different services of my project, but from a financial point of view (according to the vision of paying per node) it's very bad. However, I think it's good practice to have more nodes than one giant one.
What problems is the product solving and how is that benefiting you?
Armo makes it possible to read kubescape in a very pleasant and collaborative way.