Yes. We automate deployment of our Sentinel agents to your VMs, no matter their location and in any combination.

Organizations that seek Linux stability avoid kernel module implementations that “taint” the kernel of the OS. The benefits include: (1) avoiding kernel panic risks; and (2) freedom for you to update your Linux VM image at will, without fear of conflict with the agent. (3) No invalidation of support from distro vendors

Yes, we also support managed k8s services from Azure (AKS) and Google Cloud (GKE), as well as self-managed k8s.

Not at all. Our deployment is automated and resource-efficient: just 1 agent per worker node and without any sidecar or pod instrumentation. Deployed as a daemonset, our agent auto-scales with your k8s clusters. Clean and simple.

Runtime container protection provides security for zero-day malware, for detection of malicious fileless behaviors, and in cases where a vulnerability was found after the image was scanned pre-production. Runtime EPP and EDR give you the same IR and threat hunting capability you have come to expect from your endpoint security, all without any container interference. Storyline™ and EDR data retention options catalyze root cause analysis, so you can get back in business and prevent recurrence.

Yes. Using the cloud service provider metadata, you can automatically assign the assets to groups based on their account ID. Any new instance that spins up with that account ID will be dynamically associated with the relevant group.