Runtime Security in Rancher with Falco

[sorangutan]

Runtime security for Rancher environments requires putting controls in place to detect unexpected behavior that could be malicious or anomalous. Examples include: Exploits of unpatched and new vulnerabilities Insecure configurations Leaked or weak credentials Insider threats Even with processes in place for vulnerability scanning and implementing pod security policies and network policies in Rancher, not every risk will be addressed. You still need mechanisms to confirm these security barriers are effective and provide a last line of defense when they fail.

https://rancher.com/blog/2020/runtime-security-with-falco/