StackRox

StackRox was established in 2014 by Sameer Bhalotra, Ali Golshan, and Wei Lien Dang, with an initial goal of reimagining enterprise security. The founders brought extensive experience from the security and technology sectors. Bhalotra had a background in cybersecurity at the White House National Security Council, the Senate Select Committee on Intelligence, and Google. Golshan's experience includes over 15 years in forensics and security architecture, having founded another security startup, Cyphort, and worked with the Intelligence Community. Dang led product initiatives at companies like CoreOS, Amazon Web Services, and Splunk. This collective expertise shaped the company's direction towards addressing complex security challenges in modern IT infrastructure.

The company pivoted to focus specifically on Kubernetes-native security, a strategic decision that aligned with the growing dominance of Kubernetes as the standard for container orchestration. This focus differentiated StackRox from first-generation container security platforms by embedding its policy engine directly within Kubernetes clusters. The firm's primary offering, the StackRox Kubernetes Security Platform, provides a comprehensive solution for enterprises to secure cloud-native applications throughout their lifecycle—from the build and deploy phases to runtime. It caters to DevOps and Security teams, enabling them to enforce security and compliance policies consistently across all Kubernetes environments. The platform generates revenue through a software-based subscription model.

The StackRox platform delivers a wide array of features, including vulnerability management, configuration management, network segmentation, and threat detection. It provides visibility into all Kubernetes clusters by deploying components for data collection and policy enforcement directly into the infrastructure. A key feature is its ability to analyze Kubernetes configurations and identify vulnerabilities, privileged containers, and network exposures. The platform integrates with CI/CD pipelines and various ecosystem tools like Splunk, PagerDuty, and multiple cloud provider registries, streamlining DevSecOps workflows. In January 2021, Red Hat announced its acquisition of StackRox, a transaction that closed in February 2021. Following the acquisition, Red Hat open-sourced the StackRox technology, which now forms the basis for Red Hat Advanced Cluster Security for Kubernetes and the open-source StackRox community project.

Keywords: Kubernetes security, container security, DevSecOps, cloud-native security, Red Hat Advanced Cluster Security, Kubernetes-native, configuration management, vulnerability management, network segmentation, runtime security, compliance automation, threat detection, incident response, microservices security, OpenShift security, Ali Golshan, Sameer Bhalotra, Wei Lien Dang, policy enforcement, container lifecycle security, cloud security posture management, KubeLinter, application security, infrastructure security