Works with your stack

Full support for any CNCF-conformant Kubernetes cluster.

Profile and protect containers running on Docker.

Deploy bifrost on Amazon Elastic Kubernetes Service clusters.

Full support for Google Kubernetes Engine.

Protect workloads running on Azure Kubernetes Service.

Works with DigitalOcean Kubernetes (DOKS) clusters.

Deploy on OVHcloud Managed Kubernetes Service.

Works with Scaleway Kapsule and Kosmos clusters.

Deploy on UpCloud Managed Kubernetes.

Supports Cleura OpenStack-based Kubernetes.

Deploy on Elastx Kubernetes as a Service.

Supports IONOS Managed Kubernetes.

Deploy on Fuga Cloud managed Kubernetes.

Works with Akamai Connected Cloud (Linode) Kubernetes Engine.

Integrate bifrost into your GitHub Actions workflows.

GitOps-native deployment of security profiles with ArgoCD.

Install and manage bifrost via Helm charts.

Automate with the bifrost API: SBOM uploads, profile generation, service listings and tagging (OpenAPI v2).

Full support on Ubuntu-based nodes.

Full support on Debian-based nodes.

Works with Talos Linux immutable Kubernetes OS.

Supports Garden Linux, the Kubernetes-optimised OS from the Gardener project.

Works with VMware Photon OS, a minimal Linux container host.

Blocked events and new reachable CVEs, with their context, delivered to the channel your team already watches.

Blocked events and new reachable CVEs, with their context, in your Teams channels.

Export runtime security metrics to Prometheus for dashboards and alerting.

Visualise security posture and runtime events in Grafana dashboards.

Send events to any endpoint: connect to your SIEM, ticketing system, or custom automation.

Generates a standard AppArmor profile per build that loads without bifrost; in enforce mode, the kernel enforces it.

Uses eBPF for lightweight, kernel-level behavioural observation.