Besides pointing pentester tools like metasploit at yourself, there are some nice scanners out there. https://github.com/quay/clair. - Source: Hacker News / 5 months ago

Clair. Vulnerability Static Analysis for Containers. - Source: dev.to / 5 months ago

Https://github.com/quay/clair 9.4k stars, updated 17 hours ago. Source: about 1 year ago

It scaled well compared to a naive graph abstraction implemented outside the database, but when performance wasn't great, it REALLY wasn't great. We ended up throwing it out in later versions to try and get more consistent performance. I've since worked on SpiceDB[1] which takes the traditional design approach for graph databases and simply treating Postgres as triple-store and that scales far better. IME, if you... - Source: Hacker News / about 1 year ago

Open source: Trivy, Gryp and Clair are widely used open source tools for container scanning. - Source: dev.to / over 1 year ago

The best way to do this, is with the help of tracing tools such as paid tools such as Honeycomb, or your own instance of the open source Jaeger offering, or perhaps Encore's built in tracing system. - Source: dev.to / 9 months ago

Jaeger: A distributed tracing platform. In addition to what the other tools offer, Jaeger allows you to analyze network performance and optimize latencies. - Source: dev.to / over 1 year ago

Application performance Monitoring (APM) improves the visibility into a distributed microservices architecture. The APM data can help enhance software security by allowing a full view of an application. Distributed tracing tools like Zipkin and Jaeger kind of stitch all logs together and bring full visibility of requests from start to end. It speeds up response time for new bugs or attacks. - Source: dev.to / over 1 year ago

While we are on this topic, its hard not to mention the Go programming language and its ubiquitous presence in the cloud services and infrastructure domain. It combines the safety of a compiled language with the speed a interpreted language (like Python), has a robust standard library and compiles to a single binary. These and many more qualities have led to lots of cloud-native software (IaC, monitoring,... - Source: dev.to / almost 2 years ago

Jaeger - CNCF Jaeger, a Distributed Tracing Platform Kiali - Kiali project, observability for the Istio service mesh ELK - Elasticsearch, Logstash, Kibana Fluentbit - Fast and Lightweight Log processor and forwarder for Linux, BSD and OSX Loki - Like Prometheus, but for logs. - Source: dev.to / over 2 years ago