RedHat acquires container security company StackRox and open source its technology

RedHat, which has been acquired by IBM, announced that it will acquire the container security startup StackRox and open-source StackRox’s technology. The original open-source product KubeLinter of StackRox is also handed over to Red Hat to provide support. The transaction is expected to be completed in the first quarter of 2021.

StackRox was founded in 2014, and the business focus of the past two years has been to ensure the security of the enterprise-level Kubernetes platform. StackRox software directly deploys components that can implement in-depth data collection in the Kubernetes cluster infrastructure to provide visibility to all Kubernetes clusters, reduce the time and effort required to improve security; and simplify security analysis, investigation, and remediation. The StackRox policy engine contains hundreds of built-in controls to enforce best security practices, industry standards (such as CIS benchmarks and NIST), configuration management of containers and Kubernetes, and runtime security.

Red Hat said that by introducing StackRox’s powerful Kubernetes local security features into Red Hat’s Kubernetes management platform, OpenShift, Red Hat will further realize its vision of providing an overall platform that allows users to deploy and run almost safely in a hybrid cloud environment.

With the help of StackRox, Red Hat will focus on changing the protection of cloud-native workloads, by extending and improving Kubernetes native controls, and shifting the security work to the container construction and CI/CD phases, thereby providing a unified solution and enhancing the entire IT Security of the stack and life cycle.

In the future, in addition to Red Hat OpenShift, StackRox will continue to support multiple Kubernetes platforms, including Amazon Elastic Kubernetes Service, Microsoft Azure Kubernetes Service, and Google Kubernetes Engine.