Public Preview: Registry-agnostic agentless runtime container vulnerability assessment (Microsoft Defender for Cloud)

This capability provides comprehensive vulnerability assessment and remediation for container images, regardless of their registry source. With this, organizations expand vulnerability assessment coverage to include running containers with images from any registry (not restricted to supported registries). 

Vulnerability information powered by Microsoft Defender Vulnerability Management is added to the cloud security graph for contextual risk, calculation of attack paths, and hunting capabilities. 

Container images are collected from the runtime environment and scanned for vulnerabilities. Scanned images include customer owned containers, Kubernetes add-ons, and third-party tools running on the cluster. Runtime environment images are collected in an agentless manner every 24 hours. 

Learn more,