[](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) ![x close icon to close mobile navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/x-black.svg) [![Cortex Cloud logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/cortexcloud-logo-dark.svg)](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown) ![magnifying glass search icon to open search field](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/search-black.svg)

* [](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* Use Cases  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Use Cases  
  Use Cases
  
  * [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)  
    Real-time cloud security powered by unified data, AI and automation
  * [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)  
    Prevent risks at the source
  * [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)  
    Rapidly prioritize and remediate risks across any cloud
  * [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)  
    Stop cloud attacks before they become breaches
  * [Security Operations](https://www.paloaltonetworks.com/cortex?ts=markdown)  
    Detect, investigate and respond to threats across enterprise and cloud

* Solutions  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Solutions  
  [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)
  
  * [Application Security Posture Management (ASPM)](https://www.paloaltonetworks.com/cortex/cloud/application-security-posture-management?ts=markdown)
  * [Software Supply Chain Security](https://www.paloaltonetworks.com/cortex/cloud/software-supply-chain-security?ts=markdown)
  * [IaC Security](https://www.paloaltonetworks.com/cortex/cloud/infrastructure-as-code-security?ts=markdown)
  * [Software Composition Analysis](https://www.paloaltonetworks.com/cortex/cloud/software-composition-analysis?ts=markdown)
  * [Secrets Security](https://www.paloaltonetworks.com/cortex/cloud/secrets-security?ts=markdown)
  * [Open Partner Ecosystem](https://www.paloaltonetworks.com/cortex/cloud/appsec-partner-ecosystem?ts=markdown)  
    [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)
  * [Cloud Security Posture Management (CSPM)](https://www.paloaltonetworks.com/cortex/cloud/cloud-security-posture-management?ts=markdown)
  * [Cloud Infrastructure Entitlement Management (CIEM)](https://www.paloaltonetworks.com/cortex/cloud/cloud-infrastructure-entitlement-management?ts=markdown)
  * [Data Security Posture Management (DSPM)](https://www.paloaltonetworks.com/cortex/cloud/data-security-posture-management?ts=markdown)
  * [AI Security Posture Management (AI-SPM)](https://www.paloaltonetworks.com/cortex/cloud/ai-security-posture-management?ts=markdown)
  * [Vulnerability Management](https://www.paloaltonetworks.com/cortex/cloud/vulnerability-management?ts=markdown)
  * [Cloud Attack Surface Management (ASM)](https://www.paloaltonetworks.com/cortex/cloud/attack-surface-management?ts=markdown)  
    [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)
  * [Cloud Detection and Response (CDR)](https://www.paloaltonetworks.com/cortex/cloud-detection-and-response?ts=markdown)
  * [Container \& Kubernetes Security](https://www.paloaltonetworks.com/cortex/cloud/container-security?ts=markdown)
  * [Cloud Workload Protection (CWP)](https://www.paloaltonetworks.com/cortex/cloud/cloud-workload-protection?ts=markdown)
  * [API Security](https://www.paloaltonetworks.com/cortex/cloud/api-security?ts=markdown)
  * [Web Application Security](https://www.paloaltonetworks.com/cortex/cloud/web-application-security?ts=markdown)  
    [Security Operations](https://www.paloaltonetworks.com/cortex/?ts=markdown)
  * [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)
  * [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)
  * [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)
  * [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)
  * [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)  
    [Industries](https://www.paloaltonetworks.com/industry?ts=markdown)
  * [Government](https://www.paloaltonetworks.com/cortex/cloud/government?ts=markdown)

* [Product Tours](https://www.paloaltonetworks.com/cortex/cloud/product-tours?ts=markdown)

* Resources  
  ![black arrow pointing left to go back to main navigation](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-black.svg) Resources  
  Learn
  
  * [Blog](https://www.paloaltonetworks.com/blog/cloud-security?ts=markdown)
  * [Cloud Research](https://www.paloaltonetworks.com/cortex/cloud/research?ts=markdown)
  * [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
  * [Live Community](https://live.paloaltonetworks.com/)
  * [Interactive Workshops](https://www.paloaltonetworks.com/cortex/cloud/interactive-workshops?ts=markdown)  
    Product Information
  * [Technical Documentation](https://docs.paloaltonetworks.com/)
  * [Open Source Projects](https://www.paloaltonetworks.com/cortex/cloud/open-source-projects?ts=markdown)
  * [Support](https://support.paloaltonetworks.com/Support/Index)  
    Resources
  * [Technology Partners](https://www.paloaltonetworks.com/partners/technology-partners?ts=markdown)
  * [Customer Success Stories](https://www.paloaltonetworks.com/customers?ts=markdown)
  * [Resource Center](https://www.paloaltonetworks.com/resources?ts=markdown)
  * [Events](https://events.paloaltonetworks.com)

* 

* [Request a Demo](https://www.paloaltonetworks.com/cortex/cloud/demo?ts=markdown)  
  ![palo alto networks logo icon](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/logo-default.svg) ![white arrow icon pointing left to return to main Palo Alto Networks site](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/arrow-right-white.svg)  
  [](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)  
  Search  
  Close search modal  
  CORTEX CLOUD

# Container and Kubernetes Security

## Build, deploy and run containerized applications without risks --- from code to cloud.

* [Request a demo](https://www.paloaltonetworks.com/cortex/cloud/trial?ts=markdown)  
  ![Container and Kubernetes Security](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/hero-banner-version3.jpg)

## RECOMMENDED

\[![From the Node Up: The Complete Guide to Kubernetes Security](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/recommended-asset-1-kubernetes-guide.jpg)

### From the Node Up: The Complete Guide to Kubernetes Security

Get the e-book\](https://www.paloaltonetworks.com/resources/ebooks/prisma-cloud-complete-guide-kubernetes?ts=markdown)  
\[![Container Security 101](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/recommended-asset-2-container-security.jpg)

### Container Security 101

Get the e-book\](https://www.paloaltonetworks.com/resources/ebooks/container-security-101?ts=markdown)  
\[![What Is Container Security?](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/recommended-asset-3-container-security-article.jpg)

### What Is Container Security?

Read the article\](https://www.paloaltonetworks.com/cyberpedia/what-is-container-security?ts=markdown)  
\[![Cortex Cloud Runtime Security: Real-Time Defense Against Cloud Attacks](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/recommended-asset-4-runtime-security.jpg)

### Cortex Cloud Runtime Security: Real-Time Defense Against Cloud Attacks

Learn more\](https://www.paloaltonetworks.com/resources/datasheets/runtime-security-product-brief?ts=markdown)  
SOLUTIONUSE CASESDemoResources  
[SOLUTION](#solution)  
[USE CASES](#use-cases)  
[Demo](#demo)  
[Resources](#resources)  
{#solution} SOLUTION

## Lock down containers from code to cloud

![visibility and control](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/complete-visbility.svg)

### Gain complete visibility and control

Gain end-to-end visibility into container risks across every stage of your application lifecycle from code and build to deployment and runtime.  
![risks](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/incident-response.svg)

### Focus on the risks that matter most

Identify the most critical attack paths by connecting risks across containers, clusters and cloud environments.  
![faster](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/software-automation.svg)

### Ship faster with built-in security

Embed security guardrails directly into your CI/CD pipeline so developers can move quickly without bottlenecks or delays.  
{#capabilities} {#use-cases}  
USE CASES

### Secure containers and Kubernetes applications with Cortex Cloud

[![Identify and remediate vulnerabilities](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/vulnerability-management.png)](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/vulnerability-management.png?ts=markdown)  
VULNERABILITY MANAGEMENT

### Identify and remediate vulnerabilities

Prioritize risk and reduce alert fatigue by surfacing critical vulnerabilities, using correlated risk factors like external exposure, excessive permissions, misconfigurations, sensitive data, secrets and malware.  
[![Enforce compliance throughout the lifecycle](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/compliance-management.png)](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/compliance-management.png?ts=markdown)  
COMPLIANCE MANAGEMENT

### Enforce compliance throughout the lifecycle

Maintain a complete audit history of compliance from build to run. Conduct compliance and reporting checks for leading frameworks and implement policies for custom checks.  
[![Protect Kubernetes environments](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/kspm.png)](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/kspm.png?ts=markdown)  
KUBERNETES SECURITY POSTURE MANAGEMENT (KSPM)

### Protect Kubernetes environments

Find and fix Kubernetes misconfigurations and security risks with guided remediation. Strengthen Kubernetes posture and meet compliance with CIS benchmarks for EKS, AKS and GKE Kubernetes clusters.  
[![Take the load off development and security teams](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/ci-cd.png)](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/ci-cd.png?ts=markdown)  
CI/CD INTEGRATION

### Take the load off development and security teams

Integrate security checks from code to cloud, by adding guardrails to your image builds and their deployments. Automatically scan repositories and registries for vulnerabilities and misconfigurations.  
[![Protect containers from active threats](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/runtime-protection.png)](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/runtime-protection.png?ts=markdown)  
RUNTIME PROTECTION

### Protect containers from active threats

Stop known and unknown threats --- like malware, cryptomining, privilege escalation and container escapes --- across your multicloud environment with a lightweight agent.  
E-BOOK  
![ebook](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/demand-gen-banner.jpg)  
The Forrester Wave^™^: Cloud Workload Security, Q1 2024  
[Read the report](https://start.paloaltonetworks.com/forrester-wave-cws-leader.html)

## Experience It for Yourself

### See how Cortex^®^ Cloud^™^ can help you build, deploy and run containerized applications without risks.

{#demo}

### Experience It for Yourself

See how Cortex® Cloud™ can help you stop cloud attacks.

## Expert resources you can trust

{#resources} [View all](https://www.paloaltonetworks.com/resources?q=*%3A*&_charset_=UTF-8&fq=PRODUCTS0_DFACET%3Apan%253Aresource-center%252Fproducts0%252Fcortex-cloud&ts=markdown)  
\[ARTICLE

#### Securing Your Kubernetes Cluster: Kubernetes Best Practices and Strategies

![Securing Your Kubernetes Cluster](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/resource-1.png)\](https://www.paloaltonetworks.com/cyberpedia/kubernetes-cluster-security?ts=markdown)  
\[CYBERPEDIA

#### What Is DevSecOps?

![What Is DevSecOps?](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/resource-2.png)\](https://www.paloaltonetworks.com/cyberpedia/what-is-devsecops?ts=markdown)  
\[ARTICLE

#### Cloud Runtime Security Without Tradeoffs

![Cloud Runtime Security Without Tradeoffs](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/resource-3.png)\](https://www.paloaltonetworks.com/blog/cloud-security/runtime-security-without-tradeoffs/?ts=markdown)  
\[DATASHEET

#### Secure Your Container Workloads

![Secure Your Container Workloads](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/cortex/container-security/resource-4.png)\](https://www.paloaltonetworks.com/resources/datasheets/tip-sheet-secure-container-workloads?ts=markdown)  
PrevNext  
{#footer}

## Products and Services

* [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown)

* [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown)

* [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown)

* [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown)

* [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown)

* [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown)

* [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown)

* [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown)

* [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown)

* [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown)

* [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown)

* [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown)

* [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown)

* [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown)

* [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown)

* [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown)

* [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown)

* [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown)

* [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown)

* [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown)

* [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown)

* [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown)

* [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)

* [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)

* [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)

* [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown)

* [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)

* [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)

* [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)

* [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)

* [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)

* [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)

* [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown)

* [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown)

* [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown)

* [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown)

* [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown)

## Company

* [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown)
* [Careers](https://jobs.paloaltonetworks.com/en/)
* [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)
* [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown)
* [Customers](https://www.paloaltonetworks.com/customers?ts=markdown)
* [Investor Relations](https://investors.paloaltonetworks.com/)
* [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown)
* [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown)

## Popular Links

* [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown)
* [Communities](https://www.paloaltonetworks.com/communities?ts=markdown)
* [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown)
* [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
* [Event Center](https://events.paloaltonetworks.com/)
* [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center)
* [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown)
* [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown)
* [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown)
* [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown)
* [Tech Docs](https://docs.paloaltonetworks.com/)
* [Unit 42](https://unit42.paloaltonetworks.com/)
* [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd)
  ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)
* [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown)
* [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown)
* [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown)
* [Documents](https://www.paloaltonetworks.com/legal?ts=markdown)

Copyright © 2025 Palo Alto Networks. All Rights Reserved

* [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks)
* [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown)
* [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/)
* [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks)
* [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks)
* EN  
  Select your language