Containerized applications bring many benefits — they are a fast way to deploy software across multiple computing environments. But securing containers is a challenge, since their unique attributes, particularly their ephemeral nature, means that they have been treated differently by security professionals in comparison to other endpoints.
Penetration testing and offensive assessment, for example, are rarely performed on containerized systems, notes Spencer Thompson, co-founder and CEO of Prelude Security. That’s a problem, since containers are still internet-facing devices and can have the same vulnerabilities.
