CloudNativeSecurityCon North America 2024

Anyone can run a vulnerability scanner, but understanding the context and relevance of a vulnerability in the context of cloud-native projects is challenging, especially when the quality of scanners varies. What vulnerability feeds are helpful? What tools can you use? Do all vulnerabilities really matter?

In this presentation, we'll break down what you should prioritize in your vulnerability scanners and where the actual value lies. We'll also discuss the best practices for implementing and evaluating the success of a vulnerability scanner. By the end of the talk, you'll understand the vulnerability scanner ecosystem, how to accurately assess your vulnerabilities, and how to effectively implement a vulnerability scanner in your daily workflows.