Spyderbat

Spyderbat is a cloud security platform that spots, identifies and blocks threats in real time in hybrid cloud, multi-cloud, Kubernetes and Linux environments. It uses technology called eBPF (Extended Berkeley Packet Filter) to offer next-gen cloud security and observability.

Some of Spyderbat's key features include:

• Detection: See all runtime app behavior, from the kernel to the cloud, in real time to cut false positives by 2-3 orders of magnitude.
• Identification: Record everything so you don't have to investigate manually, and get instant root cause analysis.
• Blocking: Automatically terminate malicious processes, pods and connections to stop attacks in real time.

Some of the benefits of using Spyderbat include:

• Faster Investigation Time: Reduce investigation time from hours to minutes with clear, chained event visualization.
• Fewer Alerts: Cut truly useless noise by 3x, so you can focus on real risks without being overwhelmed with alerts.
• Attack Blocking: Automatically detect and remediate attacks in parallel with learned guardrails to protect known-good processes.
• No Performance Impact: No code changes or performance impact, so you can run Spyderbat alongside your existing security tools.

Spyderbat also can be used for a variety of use cases:

• Cloud Detection and Response: See all runtime app behavior to reduce noise and automatically block attacks.
• Runtime Security for Kubernetes and Cloud: Protect your K8s environment with fast and accurate visibility of ephemeral containers and application behaviors.
• Multi-Cloud Security: Protect all cloud-native environments, regardless of the cloud provider you're using.

Spyderbat pricing is tiered and flexible:

• Free Tier: Forever free with 14-day retention for up to 5 active nodes, plus community support.
• Professional: Per node/month, with 90-day retention, notifications and Spyderbat support.
• Enterprise: Custom plans with longer data retention and onboarding support.

Spyderbat differs from other cloud security offerings by giving you complete visibility and control, using eBPF to monitor all runtime system and container activity. This lets you see app behavior in real time, detect attacks, identify anomalies and automatically take the right action to protect app behavior and minimize downtime.

Published on August 4, 2024