deepfence/ThreatMapper
Open Source Cloud Native Application Protection Platform (CNAPP)
Build with Backblaze B2
SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.
Loading star history...
Where it stands
Rank, growth pace and release cadence relative to everything GStars tracks.
No releases in the last 90 days; the most recent was 235 days ago, with 41 contributors on GitHub.
Gained 51% fewer stars in the last 90 days than in the 90 days before.
Use Cases & Benefits
- Provides a cloud native application protection platform that detects runtime threats and vulnerabilities across cloud, Kubernetes, serverless, and on-prem environments.
- Combines agent-based inspection with agentless monitoring to deliver comprehensive security observability and risk-ranked threat analysis.
- Use for continuous vulnerability detection and compliance monitoring in Kubernetes clusters using sensor agents and cloud scanner tasks.
- Use for securing Docker and containerized workloads by deploying lightweight sensor agents that report software dependencies and telemetry.
- Use for monitoring cloud infrastructure configurations and identifying deviations from security benchmarks across AWS, Azure, and GCP environments.
Should you depend on it?
License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.
License
Apache 2.0
Permissive: commercial use, modification and redistribution are allowed with attribution; includes an explicit patent grant from contributors.
Community files
- README: present
- Contributing guide: present
- Code of conduct: present
Watch-outs
No watch-outs from GStars' checks.
General guidance from repository metadata, not legal advice. How we score
From the README
Deepfence ThreatMapper hunts for threats in your production platforms, and ranks these threats based on their risk-of-exploit. It uncovers vulnerable software components, exposed secrets and deviations from good security practice. ThreatMapper uses a combination of agent-based inspection and agent-less monitoring to provide the widest possible coverage to detect threats.
With ThreatMapper's ThreatGraph visualization, you can then identify the issues that present the greatest risk to the security of your applications, and prioritize these for planned protection or remediation.
ThreatMapper carries on the good 'shift left' security practices that you already employ in your development pipelines. It continues to monitor running applications against emerging software vulnerabilities, and monitors the host and cloud configuration against industry-expert benchmarks.
Use ThreatMapper to provide security observability for your production workloads and infrastructure, across cloud, kubernetes, serverless (Fargate) and on-prem platforms.
Daily snapshots
Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots
Forks
631-5
Open issues
144+0
Compared with peers in Cloud
Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth
| Repository | Stars | +7d | Health | Last release |
|---|---|---|---|---|
| Asymptote-Labs/agent-beacon | 3.3K | +360 | 40 | today |
| juicedata/juicefs | 14.7K | +105 | 64 | 14 days ago |
| GoogleCloudPlatform/microservices-demo | 21.1K | — | 63 | 38 days ago |
| quarkusio/quarkus | 16.0K | — | 60 | 2 days ago |
| awslabs/mcp | 9.8K | — | 65 | 9 days ago |
| deepfence/ThreatMapper | 5.3K | — | 47 | 235 days ago |
| Category median | 14.7K | +233 | 63 | — |
Discover Repositories
Search across tracked repositories by name or description