Red Hat to Acquire StackRox
January 07, 2021

Red Hat announced its intent to acquire StackRox

By bringing StackRox’s Kubernetes-native security capabilities to Red Hat OpenShift, an enterprise Kubernetes platform, Red Hat will further its vision to deliver a single, holistic platform that enables users to build, deploy and securely run nearly any application across the entirety of the hybrid cloud.

Kubernetes, one of the fastest growing open source projects, is the foundation of cloud-native applications, which are core to the digital transformation that is occurring across industries. As container and Kubernetes adoption in production environments grows, challenges remain. According to Gartner, “Container usage for production deployments in enterprises is still constrained by concerns regarding security, monitoring, data management and networking.”

To help mitigate these concerns, organizations need solutions that lay a secure foundation for modern workloads.

Container security is Linux security. Red Hat has long been a provider of security for enterprise open source solutions, beginning with Red Hat Enterprise Linux and continually evolving to set new standards to secure cloud-native environments. Building on this foundation, OpenShift takes a layered approach to securing containers, integrating security throughout the container lifecycle, from building, to deploying to running containers in mission critical environments.

With this acquisition, Red Hat will further expand its security capabilities, adding StackRox’s complementary capabilities to strengthen integrated security across its open hybrid cloud portfolio with greater simplicity and consistency. With StackRox, Red Hat will focus on transforming how cloud-native workloads are secured by expanding and refining Kubernetes’ native controls, as well as shifting security left into the container build and CI/CD phase, to provide a cohesive solution for enhanced security up and down the entire IT stack and throughout the lifecycle.

Founded in 2014, StackRox was created with a goal of reinventing enterprise security and has evolved over the past two years to focus on Kubernetes security. Unlike first generation container security platforms, which were often container-centric offerings, StackRox differentiates with a Kubernetes-native security platform. With this, organizations can more easily control and enforce policies, using the same declarative approach as Kubernetes to scale their applications while still maintaining the necessary security.

The StackRox software provides visibility across all Kubernetes clusters, by directly deploying components for enforcement and deep data collection into the Kubernetes cluster infrastructure, reducing the time and effort needed to implement security, and streamlining security analysis, investigation and remediation. The StackRox policy engine includes hundreds of built-in controls to enforce security best practices, industry standards such as CIS Benchmarks and NIST, and configuration management of both containers and Kubernetes, and runtime security.

In addition to Red Hat OpenShift, StackRox will continue to support multiple Kubernetes platforms, including Amazon Elastic Kubernetes Service (EKS), Microsoft Azure Kubernetes Service (AKS), and Google Kubernetes Engine (GKE).

StackRox also helps to simplify DevSecOps and enable cloud-native environments to be more intrinsically secure, by integrating directly into application pipelines and customers’ existing registry, image scanning and CI/CD tools. In October 2020, StackRox launched KubeLinter, an open source project that analyzes Kubernetes YAML files and Helm charts for correct configurations, with a focus on enabling production readiness and security earlier in the development process.

Consistent with Red Hat’s open source heritage, Red Hat plans to open source StackRox’s technology post acquisition. Red Hat will continue to support the KubeLinter community as well as new communities as Red Hat works to open source StackRox’s offerings.

The transaction is expected to close in the first quarter of 2021, subject to customary closing conditions.

Paul Cormier, President and CEO, Red Hat, said: “Securing Kubernetes workloads and infrastructure cannot be done in a piecemeal manner; security must be an integrated part of every deployment, not an afterthought. Red Hat adds StackRox's Kubernetes-native capabilities to OpenShift's layered security approach, furthering our mission to bring product-ready open innovation to every organization across the open hybrid cloud across IT footprints.”

Share this

Industry News

November 07, 2024

Broadcom announced the general availability of VMware Tanzu Platform 10 that establishes a new layer of abstraction across Cloud Foundry infrastructure foundations to make it easier, faster, and less expensive to bring new applications, including GenAI applications, to production.

November 07, 2024

Tricentis announced the expansion of its test management and analytics platform, Tricentis qTest, with the launch of Tricentis qTest Copilot.

November 07, 2024

Redgate is introducing two new machine learning (ML) and artificial intelligence (AI) powered capabilities in its test data management and database monitoring solutions.

November 07, 2024

Upbound announced significant advancements to its platform, targeting enterprises building self-service cloud environments for their developers and machine learning engineers.

November 07, 2024

Edera announced the availability of Am I Isolated, an open source container security benchmark that probes users runtime environments and tests for container isolation.

November 06, 2024

Progress announced 10 years of partnership with emt Distribution — a leading cybersecurity distributor in the Middle East and Africa.

November 06, 2024

Port announced $35 million in Series B funding, bringing its total funding to $58M to date.

November 05, 2024

Parasoft has made another step in strategically integrating AI and ML quality enhancements where development teams need them most, such as using natural language for troubleshooting or checking code in real time.

November 05, 2024

MuleSoft announced the general availability of full lifecycle AsyncAPI support, enabling organizations to power AI agents with real-time data through seamless integration with event-driven architectures (EDAs).

November 05, 2024

Numecent announced they have expanded their Microsoft collaboration with the launch of Cloudpager's new integration to App attach in Azure Virtual Desktop.

November 04, 2024

Progress announced the completion of the acquisition of ShareFile, a business unit of Cloud Software Group, providing a SaaS-native, AI-powered, document-centric collaboration platform, focusing on industry segments including business and professional services, financial services, industrial and healthcare.

November 04, 2024

Incredibuild announced the acquisition of Garden, a provider of DevOps pipeline acceleration solutions.

October 31, 2024

The Open Source Security Foundation (OpenSSF) announced an expansion of its free course “Developing Secure Software” (LFD121).

October 31, 2024

Redgate announced that its core solutions are listed in Amazon Web Services (AWS) Marketplace.

October 30, 2024

LambdaTest introduced a suite of new features to its AI-powered Test Manager, designed to simplify and enhance the test management experience for software development and QA teams.