Kennel — Instant OCI Container Analysis and Risk Assessment

What is Kennel?

Kennel is a powerful and advanced web-based analysis tool specifically designed for OCI (Open Container Initiative) containers within the Oracle Cloud Infrastructure (OCI) environment. Kennel provides instant and comprehensive visibility into the Software Bill of Materials (SBoM) within containers, identifies known security vulnerabilities (OSV), and determines End-of-Life (EOL) dates for used components. Unlike traditional solutions that require complex installations or deep integration, Kennel operates as a standalone web service, making it easy to use and quickly accessible from any browser. It is a vital tool for developers, security engineers, and system administrators who seek to ensure the security and compliance of their containers without needing complex tools or specialized security analysis expertise.

Kennel's core idea revolves around simplifying the OCI container auditing process. Instead of manually delving into the complex details of each component, Kennel automates this process, providing users with a detailed and clear report on the container's status from a security and lifecycle perspective. This enables informed decisions regarding necessary updates, removal of vulnerable components, and planning long-term maintenance strategies. With its intuitive interface and focus on delivering practical information, Kennel can be an integral part of a secure Software Development Lifecycle (SDLC) and modern DevOps practices.

Key benefits

• Instant SBoM Analysis: Kennel provides an instant and comprehensive Software Bill of Materials (SBoM) list of components found within OCI containers. This includes libraries, dependencies, and versions, giving you full visibility into exactly what your containers contain. This feature is essential for adhering to security and compliance standards and tracking open-source components.
• Open Source Vulnerability (OSV) Detection: The application automatically scans detected components for known Open Source Vulnerabilities. Kennel displays detailed reports on discovered vulnerabilities, including severity levels and data sources, helping you prioritize fixes and mitigate potential risks.
• End-of-Life (EOL) Identification: Kennel analyzes components to determine their anticipated End-of-Life (EOL) dates. This feature is crucial for avoiding the use of outdated components that will not receive future security updates, helping to proactively plan upgrades and reduce long-term risk exposure.
• Integrated Web Analytics: Kennel functions as a web-based analytical tool, meaning there's no need to install additional software on your servers or development environment. You can simply upload or point to container information via the web interface and receive reports directly in your browser.
• Native OCI Support: Kennel is specifically designed to work seamlessly with OCI containers and the Oracle Cloud Infrastructure environment. This ensures optimal compatibility and efficient performance when analyzing assets within this ecosystem.

How to use it as a freelancer/entrepreneur?

For a freelancer or entrepreneur managing container-based projects, Kennel can be an invaluable tool for increasing productivity and ensuring the quality and security of their products. Imagine you are an independent developer working on a containerized web application for a client. Instead of spending hours manually researching every dependency and component within your image to discover vulnerabilities or outdated components, you can use Kennel to get an instant report. This saves you significant time and effort, allowing you to focus on developing core features and delivering more value to your clients.

For example, if you are delivering a project to a client that requires a high level of security, you can use Kennel's report to demonstrate that you have audited the container, identified any potential issues, and addressed them. This not only enhances client trust in your work but also adds a professional layer to your services. You can even incorporate this as part of your offering, providing container security auditing as an additional paid service, thereby increasing your potential income. It also helps you avoid critical situations where security issues are discovered after project delivery, which could negatively impact your reputation.

Smart usage tip: Integrate Kennel as part of your Continuous Integration/Continuous Deployment (CI/CD) pipeline. After each new container build, pass it through Kennel. If Kennel detects any critical vulnerabilities or EOL components, set up a webhook or alert to automatically halt the deployment process until these issues are resolved. This ensures that faulty or insecure containers never reach the production environment, keeping your applications secure and reducing the need for late manual intervention.