SUSE Security Vulnerability Scanner

SUSE's Cloud Native product family introduces additional value with greater security assurances, extended lifecycles, access to focused architectures and Kubernetes advisories. It will also offer options to get production support for innovative Cloud Native projects. With SUSE's Cloud Native, installation assets are hosted on a trusted registry owned and managed by SUSE.

SUSE Security Vulnerability Scanner is the SBOM-centric scanning component of the SUSE Security suite. It auto-discovers Kubernetes workloads, pulls each container image only once to generate its SBOM, and continuously analyzes them for vulnerabilities. Registry scanning can be configured to extend coverage beyond running workloads. With VEX support and full air-gap compatibility, it scales across large clusters and supports regulated and disconnected environments.