Anchore, Inc. announced the commercial release of its flagship
product. Anchore gives developers, operations and security teams
unparalleled visibility into their containers and the chain of custody
at every stage in the development lifecycle.
Anchore also
announced today that it raised close to $5 million in venture capital
funding. Seed round investors include Andreas von Blottnitz and Menlo
Ventures' managing director Doug Carlisle.
Anchore works
seamlessly with an enterprise's IT infrastructure whether deployed
on-premises or in the cloud, regardless of the image registry, container
runtime or orchestration platforms. With Anchore's on-premise offering
organizations can easily integrate container inspection and analysis
into the CI/CD pipeline to ensure that corporate policies are enforced.
Anchore's SaaS offering lets users conduct container inspections and
visualizations and will include tools to vet, certify, inspect and
synchronize container images to ensure that they comply with standards
policies defined by the organization. These policies cover more than
basic operating system vulnerabilities and can be customized to include
operating system packages, third party packages, software artifacts and
configuration files.
"Container-based deployments require speed
and agility, making transparency and control a critical aspect of
application production deployment," Said Saïd Ziouani, Anchore CEO and
cofounder. "Anchore 1.0 marks a major milestone in delivering a full
end-to-end container visibility toolset that spans security
vulnerability to configuration, and packaging to provenance, across both
public and private registries."
Using plug-ins for CI/CD
platforms such as Jenkins organizations can ensure that container images
are inspected during each stage of the software development pipeline.
Compatible with public container registries such as DockerHub, Anchore
will interact with container platforms, including Kubernetes, Mesos,
CoreOS, ECS, and Google Container Engine.
"As containers are
adopted at an accelerating rate by businesses of all shapes and sizes
and deployed into production, it's critical to know with precision what
is running in a given container and where it came from," said Stephen
O'Grady, Principal Analyst with RedMonk. "Anchore is built to add just
these kinds of capabilities to container infrastructure, regardless of
what it's made up of."
Anchore, Inc. was co-founded in April by
open source veterans Saïd Ziouani, CEO, and Dan Nurmi, CTO. Anchore's
management team is headed up by Sean Doherty, SVP Business Development
and Andrew Cathrow, VP Products and Marketing, both Red Hat veterans.