Veluna

Auto asset discovery

Automatically find and inventory all Kubernetes, Container, and Host assets after Sentry Agent deployment.

C·S·O security classification

Classify assets as Confidential, Sensitive, or Open under N2SF standards and enforce differentiated controls.

Real-time change detection

Instantly detect new assets, deletions, and configuration changes and notify the security team.

Network topology visualization

Represent actual communication paths between clusters, nodes, and services as a graph.

Instant risk node identification

Highlight the most dangerous assets by combining vulnerabilities, detections, and misconfigurations.

Lateral movement path analysis

Identify paths an attacker could take after initial compromise and close them proactively.

Network vulnerability detection

nmap scanning discovers open ports and services, while eBPF runtime tracing monitors real-time network communications across all applications. Combining static scanning with dynamic tracing ensures no network vulnerability is missed.

eBPF runtime threat detection

Directly trace kernel syscalls to detect privilege escalation, anomalous processes, and ransomware behavior instantly.

Misconfiguration detection

Identify misconfigurations across OS, Container, and Kubernetes with rule-based checks and remediation guidance.

No-Code rule builder

Define detection rules with a condition builder — no YAML or JSON. Security teams create and apply rules directly.

MITRE ATT&CK classification

Every detected event is classified by MITRE ATT&CK tactic and technique for immediate context.

CVSS + EPSS prioritization

Analyze both severity (CVSS) and actual exploit probability (EPSS) to identify the most dangerous vulnerabilities now.

Patch availability classification

Separate immediately patchable vulnerabilities from those requiring workarounds to reduce operational burden.

Top vulnerable assets ranking

Instantly see which assets concentrate the most vulnerabilities and prioritize remediation.

Four policy types

Manage Operation Simple, Combination, Runtime, and Audit policies from a single interface.

Consistent enforcement

Deploy the same policy to Kubernetes, Containers, and Hosts at once and monitor enforcement status in real time.

Change history tracking

Automatically record policy creation, modification, and deletion history as regulatory audit evidence.