SUSE Security
Open source container security platform from the SUSE Rancher family, for Kubernetes runtime and compliance
Quick Overview
| Company | SUSE (SUSE Software Solutions Germany GmbH named for privacy) |
|---|---|
| Category | Cloud Security Platforms (CNAPP) |
| Headquarters | Nuremberg, Germany |
| Founded | Not stated |
| EU Presence | Yes - Germany (EU) |
| Data Location | Your own infrastructure |
| Open Source | Open source (per SUSE; licence not checked) |
| GDPR Compliant | Yes |
| Self-Hosting | Yes - runs in your clusters |
| Main Features | Vulnerability scanning, admission control, network segmentation, runtime protection, compliance reports, Kubernetes CIS benchmark checks |
| Pricing | Subscription, see website |
| Best For | Teams on Kubernetes or Rancher who want to operate their own container security |
| Replaces | Wiz container security, Prisma Cloud, Aqua |
Detailed Review
SUSE describes this product as an open source, zero trust container security platform. It focuses on clusters rather than cloud account posture, so it overlaps with part of what Wiz offers.
The SUSE legal page names SUSE Software Solutions Germany GmbH in Nuremberg as the main contact for privacy matters.
Layer 7 segmentation
The platform can discover application behaviour, isolate services and block network attacks between container and pod pairs at layer 7.
It also lists real-time identification of network, packet and application attacks.
Scanning and admission control
Vulnerability scans run through build, test and deployment, with admission control and checks against the Kubernetes CIS Benchmark and Docker Bench.
Risk scores and compliance reports include PCI DSS, HIPAA and GDPR reporting.
Runs where you run it
Because it deploys into your clusters, data does not need to leave your infrastructure. It integrates with Rancher, Red Hat OpenShift and the three large clouds.
This fits sovereignty-minded platform teams more than teams that want a hosted console.
Limitations to Consider
There is no cloud account posture module on the product page, so it does not replace a CSPM tool. The site lists subscriptions but no prices. Operating it in-house costs staff time. The licence string was not checked in the repository.
Who Should Use SUSE Security
European platform teams on Rancher or Kubernetes that prefer self-operated, open source container security.
Pros and Cons
Pros
- Open source per SUSE
- Self-hosted in your clusters
- Layer 7 network segmentation
- Compliance reports
- German entity for privacy contact
Cons
- No cloud account posture
- No published prices
- In-house operation
- Container focus only
Alternatives to SUSE Security
Other European cloud security platforms (cnapp) worth comparing before you decide:
Aikido Security
Belgium · Ghent platform that joins code, container and cloud posture checks
ARMO
Israel · Runtime-driven Kubernetes and cloud security built on Kubescape
Sweet Security
Israel · Runtime-first CNAPP that reasons from live workload behaviour
Orca Security
Israel · Agentless SideScanning CNAPP from Tel Aviv across six clouds
See all European cloud security platforms (cnapp) or compare them directly against Wiz container security on our alternatives page.
Frequently Asked Questions
It covers container and Kubernetes workload security, not cloud account posture.
In your own Kubernetes environment, including Rancher and OpenShift.
Yes, SUSE lists built-in audits and reports including PCI DSS, HIPAA and GDPR.