SUSE Security
SUSE Security is the only fully open source, Zero Trust container security platform and AI agent enhanced. Attackers now use AI to find flaws faster. The new SUSE Security Vulnerability Scanner shows which risks attackers exploit so your team fixes those first, and runtime protection stops the rest. Secure the AI Supply Chain.
01
Enterprise-grade container security
Secure the AI Supply Chain from build to runtime with vulnerability scans, image assurance, advanced runtime security and network segmentation.
02
Zero trust protection
03
Straightforward compliance
Built-in audits and reporting for PCI DSS, HIPAA and GDPR, plus exploit-based prioritization and SBOM export that support EU Cyber Resilience Act and CISA BOD 26-04 programs.
04
Easily secure DevOps
Nova Credit secures personal credit data of 5.6 million customers
“With SUSE Rancher Prime and SUSE Security, our developers can identify potential issues using automatic system scans and perform quick fixes while they are writing code. Now we can develop a new application or feature in as short as two weeks.”
William Lam | Head of infrastructure | Nova Credit
SUSE Security’s Top Features
Profile Risk with Vulnerability Management
- Scanning and admission control during build, test, and deployment.
- Scans running workloads and nodes in the cluster, not just registry images.
- Ranks findings with KEV and EPSS and hides what VEX shows is not exploitable.
- Exports SBOMs for audits, on premises or air-gapped.
Protection of Data in Production
- Protect containers against attacks from internal and external networks.
- Real-time identification and blocking of network, packet, zero-day, and application attacks like DDoS and DNS.
- AI-driven anomaly detection provides even greater accuracy in identifying and mitigating threats.
- Identify and block at Layer 7 between container and pod pairs
Automated Prevention and Policy
- DevOps teams deploy new apps with integrated security policies to ensure they are secured throughout the CI/CD pipeline and into production.
- SUSE Security Runtime Enforcer learns how each workload behaves and blocks anything new, even attacks no scanner has seen.
- Simplified policy management with an enhanced interface and policy templates that make security best practices easy to enforce.
Integrations and Platforms
- Runs on all major cloud platforms including AWS, Azure, and Google Cloud Platform.
- Integrates with all leading CMPs including Rancher, Red Hat OpenShift and more.
- Supports SYSLOG and webhooks for notifications into alerting systems.
- LDAP integration and single sign-on with SAML support.
Get Started with SUSE Security
Consulting
Your modernization journey is as unique as your business. We work with you and your team to identify starting points, design solutions, implement container security best practices, and optimize for continual success. Learn More
Training Services
If skills are inhibiting your transformation, SUSE Training is your answer. Our comprehensive portfolio of courses and certification paths provides the training that fits your needs, your schedule, and your business. Learn More
Support Services
Extend your SUSE support with direct, named access to a resource who knows you, your team, and your infrastructure. Keep up with the pace of change and customer expectations, while still taking care of everyday business. Learn More
Blog
One Intelligent SUSE Platform, Not Seven Fragmented Tools to Keep Kubernetes Governed and Secure
Beyond CVEs: What the Hugging Face AI Intrusion Teaches Us About Modern Security