Ephor

This open-source platform provides extensive vulnerability management and asset tracking for containerized environments, enabling users to discover, prioritize, and remediate security issues efficiently. Its main features include self-hosted scanning integration with popular vulnerability scanners, a detailed dashboard with heatmaps and alerts, triage workflows for assessing exploitability, remediation tracking, and SBOM indexation to identify vulnerable dependencies across all images and clusters. It addresses the challenge of bridging inexpensive open-source vulnerability scans with costly enterprise security solutions by offering an all-in-one, customizable, and runtime-aware management tool suitable for security teams, DevOps engineers, and organizations seeking solid container and software supply chain security.

Ephor can be found in Container & Kubernetes Security categories.