Abstract: Systems and methods are provided to identify security vulnerabilities related to containerization platforms. Container images may be received from a repository, and scanned for security vulnerabilities. Containers may be automatically generated and updated with security updates when the images are extracted and identified. Updated versions of images may be generated based on the updated containers. Stored security vulnerability may be automatically updated with CVE information received from external databases at regular intervals, or upon receiving a scan request. Scan results may be generated, stored and compared. Vulnerability comparisons may be generated for an initial version of an image and an updated version of the image that includes the implemented security updates that rectify the identifiable security vulnerabilities.

Abstract: System and methods are provided to identify static security vulnerabilities in an API. The security vulnerabilities may be in API proxy bundle, which includes a configuration of an API proxy for the API. The API proxy is executable in an API gateway of an API management platform. A search is performed of any security policy specified in an API proxy bundle. A compliance failure may be determined, which is a failure of the configuration of the API proxy to comply with a set of security rules. The API proxy bundle may be corrected to address the compliance failure.

Abstract: Systems and methods are provided to identify security vulnerabilities related to containerization platforms. Container images may be received from a repository, and scanned for security vulnerabilities. Containers may be automatically generated and updated with security updates when the images are extracted and identified. Updated versions of images may be generated based on the updated containers. Stored security vulnerability may be automatically updated with CVE information received from external databases at regular intervals, or upon receiving a scan request. Scan results may be generated, stored and compared. Vulnerability comparisons may be generated for an initial version of an image and an updated version of the image that includes the implemented security updates that rectify the identifiable security vulnerabilities.

Abstract: System and methods are provided to identify static security vulnerabilities in an API. The security vulnerabilities may be in API proxy bundle, which includes a configuration of an API proxy for the API. The API proxy is executable in an API gateway of an API management platform. A search is performed of any security policy specified in an API proxy bundle. A compliance failure may be determined, which is a failure of the configuration of the API proxy to comply with a set of security rules. The API proxy bundle may be corrected to address the compliance failure.