CA-SYSDIG,-INC.
Sysdig, Inc., the secure DevOps leader, today announced findings from its Sysdig 2021 Container Security and Usage Report. While usage reveals organizations are shifting left by scanning images during the build phase, DevOps teams are still leaving their environments open to attack. The report also looks at trends, finding a 310 percent growth in container density since 2017.
The fourth annual report reveals how global Sysdig customers of all sizes and across industries are using and securing container environments. This real-world, real-time data provides insight into usage of the nearly one billion containers Sysdig customers run yearly, including security risks, container utilization, and services used. Read the Sysdig 2021 Container Security and Usage blog .
Among its findings, the report states that while 74 percent of customers are scanning before deployment, still more than half (58 percent) of containers are running as root. There are some containers that should run as root—security and system daemons for example—but this is a small portion of total containers. These risky configurations leave easy access to potentially compromise the system and access sensitive data. This finding stresses the need for security throughout the lifecycle of a container image—fixing vulnerabilities is not enough.
Highlights From the Report
Container density grows 170% since 2018
Over the past three years, the median number of containers-per-host more than doubled from 15 in 2018 to 41 today, indicating a growth in efficiency and a shift in cost savings as containers mature. This reveals a continued focus on optimization.
Prometheus continues to grow, 35% YoY
Open source adoption is broader than just Kubernetes as organizations are shifting toward Prometheus as the standard approach to monitoring container environments. The use of Prometheus metrics among Sysdig customers grew 35 percent year-over-year.
Docker down, containerd and CRI-O up 4X
In 2017, Docker represented 99 percent of containers in use at that time. Today, that number has fallen to 50 percent, down from 79 percent in October 2019. While Docker revolutionized containers, organizations are rapidly switching to newer runtimes like containerd and CRI-O.
21% of containers live less than 10 seconds
The ephemeral nature of containers is a unique efficiency advantage, yet it can be a challenge in managing issues around security, health, and performance. The short life of containers reaffirms the need for container-specific tools for security and monitoring. For example, organizations need metric collection with intervals of less than 10 seconds and a detailed record of what occurred when the container was alive.
“With the high-profile breaches we are seeing and the accelerated adoption of containers in production, the container security risk is now on the radar of CISOs. Across millions of containers that we have studied, it’s clear that organizations are shifting security left, but they are neglecting critical best practices,” said Suresh Vasudevan, chief executive officer of Sysdig. “Container security has to span the entire software development lifecycle. Until organizations fix risky configurations, protect their runtime environments, and invest in container forensics, we will see an increase in container security breaches. I expect we will see several high-impact breaches before we release our next report.”
Other Interesting Findings
- Falco, the open source runtime project for cloud-native environments created by Sysdig and donated to the CNCF, has seen a 300 percent increase in Docker Hub downloads over the last year.
- The use of golang increased to 66 percent, a 470 percent jump since last year.
- 63 percent of container images are replaced within two weeks or less, signifying a more frequent code deployment rate.
Learn More About this Report
- Download the full Sysdig 2021 Container Security and Usage Report .
- Download the infographic .
- Read the usage report blog .
- Join the webinar Real-World Insights: Dig into Sysdig’s Container Security and Usage Report on Jan. 21 at 10am PST to walk through the report with the author.
About Sysdig
Sysdig is driving the secure DevOps movement, empowering organizations to confidently secure containers, Kubernetes, and cloud services. With the Sysdig Secure DevOps Platform, cloud teams secure the build pipeline, detect and respond to runtime threats, continuously validate compliance, and monitor and troubleshoot cloud infrastructure and services. Sysdig is a SaaS platform, built on an open source stack that includes Falco and sysdig OSS, the open standards for runtime threat detection and response. Hundreds of companies rely on Sysdig for container and Kubernetes security and visibility. Learn more at www.sysdig.com .
View source version on businesswire.com: https://www.businesswire.com/news/home/20210113005319/en/
Link:
About Business Wire
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
Belkin Achieves Qi2.2 Certification for Its Upcoming Products, Unlocking the Future of 25W Wireless Charging15.7.2025 19:06:00 CEST | Press release
With Qi2.2 certification, Belkin reinforces its commitment to quality, safety, and performance for the next generation of wireless charging Belkin, a leading consumer electronics brand for over 40 years, today announced it has received official Qi2.2 certification from the Wireless Power Consortium (WPC) for its upcoming products. As one of the first accessory brands to deliver Qi2.2-certified devices, Belkin is helping bring the next generation of wireless charging to market – enabling faster wireless charging speeds, broader compatibility, and improved performance for consumers. Belkin’s close partnership with the WPC since 2015 has been instrumental in bringing these advancements to consumers. As an early adopter and long-time contributor to WPC standards, Belkin was selected as one of a small group of trusted manufacturers to test and certify Qi2.2 products ahead of the broader industry rollout. All Belkin products undergo rigorous safety, quality, and performance testing. The comp
Cessna Grand Caravan EX to Feature New Executive Interior Options, Expanding Opportunities for Elevated Missions15.7.2025 18:05:00 CEST | Press release
The legendary Cessna Grand Caravan EX will now feature three new executive interior schemes for customers to select when designing their aircraft cabin. The Lunar, Obsidian and Saddle Sport interiors join the existing Canyon and Savanna schemes, providing a broader range of standard choices. The new interior options are available to customers starting this month and allow them to further tailor the interior of their aircraft based on their personal preference or mission. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20250715021096/en/ Cessna Grand Caravan EX to feature new executive interior options, expanding opportunities for elevated missions (Photo Credit: Textron Aviation) The Cessna Grand Caravan EX is designed and manufactured by Textron Aviation Inc., a Textron Inc. (NYSE:TXT) company. Premium versions of each of the new interiors are also available, featuring quilted seat stitching and plush carpet, providing an elev
7 Million Tokens Sells Out in less than One Hour—$MBG Token Pre-Sale Shatters Expectations15.7.2025 17:27:00 CEST | Press release
MultiBank Group, the world’s largest and most regulated financial derivatives institution, has set a new benchmark in digital asset launches. The Group’s $MBG Token Pre-Sale sold out in less than one hour with all 7 million tokens fully subscribed across MultiBank.io and Uniswap. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20250715055611/en/ The Group’s $MBG Token Pre-Sale sold out in less than one hour with all 7 million tokens fully subscribed across MultiBank.io and Uniswap. Commenting on the success of the Pre-Sale, Naser Taher, Founder and Chairman of MultiBank Group, said: “The sell-out of our initial $MBG Token offering in less than one hour is a decisive validation of our vision. In a market saturated with speculation, the response we received confirms that institutional-grade transparency, regulatory integrity, and asset-backed value are what investors are now demanding. $MBG is here for the long term, reflecting t
First Patient Enrolled in National Cancer Institute’s Vanguard Study Evaluating Guardant Health’s Shield Multi-Cancer Detection Test15.7.2025 17:01:00 CEST | Press release
Study addressing feasibility of using multi-cancer detection tests in future trials aims to enroll up to 24,000 participantsShield MCD reviewed by FDA as part of NCI’s investigational device exemption (IDE) Guardant Health, Inc. (Nasdaq: GH), a leading precision oncology company, today announced that patient enrollment has begun in the National Cancer Institute (NCI)’s Vanguard Study to evaluate emerging multi-cancer detection (MCD) technology. Guardant’s Shield™ MCD test was selected for use in the four-year study, which aims to enroll up to 24,000 patients and evaluate the use of MCD tests—blood tests that can screen for several types of cancer simultaneously—in future randomized controlled trials. Guardant’s Shield MCD test was chosen for the study based on the overall performance of its Shield platform in detecting 10 cancer types, including lung, breast, colorectal, prostate, bladder, ovarian, pancreatic, esophageal, liver and gastric. The data were presented at the 2025 American
Deltatre Announces Acquisition of Endeavor Streaming to Create Digital and Streaming Platform Leader15.7.2025 16:15:00 CEST | Press release
Deltatre, a leading international provider of streaming, digital, data, and graphics solutions for the sports, media, and entertainment industries, today announced it has entered into a definitive agreement to acquire Endeavor Streaming from Endeavor Group Holdings, Inc. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20250715833650/en/ Deltatre announces acquisition of Endeavor Streaming. In bringing together these complementary and proven digital and OTT providers, Deltatre is joining its advanced product suite – D3 VOLT, FORGE, AXIS, and DIVA, which delivers multi-functional digital experiences with integrated video – with Endeavor Streaming’s pure-play OTT product, VESPER. They will also unite their digital strategy, consulting, and direct-to-consumer growth marketing services. The combined business will be best equipped to deliver for sports, media, and entertainment clients through a compelling and comprehensive range of
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom