Consider a scenario where a zero-day vulnerability in a supply chain component allows an attacker to execute code inside one of your pods. Even if your network policies successfully block them from pivoting to other namespaces or exfiltrating data, they are still inside the pod, where attempts to run reconnaissance scripts, inject payloads, or execute shell commands, can take place.
The moment the attacker tries to execute a dangerous command or exhibit suspicious behavior, ACS detects the anomaly. Because these policies are set to termination mode within the ZTVP, ACS doesn't just send an alert, it immediately kills the rogue pod. This is the ultimate synergy of defense in depth: Network policies block the attacker's escape routes, and active runtime monitoring eliminates the threat entirely. Even if a configuration was missed, the risk of a successful, prolonged attack drops effectively to zero.
Consider a scenario where a zero-day vulnerability in a supply chain component allows an attacker to execute code inside one of your pods. Even if your network policies successfully block them from pivoting to other namespaces or exfiltrating data, they are still inside the pod, where attempts to run reconnaissance scripts, inject payloads, or execute shell commands, can take place.
The moment the attacker tries to execute a dangerous command or exhibit suspicious behavior, ACS detects the anomaly. Because these policies are set to termination mode within the ZTVP, ACS doesn't just send an alert, it immediately kills the rogue pod.
This is the ultimate synergy of defense in depth: Network policies block the attacker's escape routes, and active runtime monitoring eliminates the threat entirely. Even if a configuration was missed, the risk of a successful, prolonged attack drops effectively to zero.
Video
