Detect and Prevent Exploits in Runtime with Vulnerability Shielding

Aqua's whitepaper outlines the operational challenges of remediating vulnerabilities in containerized applications and presents Aqua vShield, an automated runtime "virtual shielding" solution that applies compensating controls to mitigate known CVEs (examples: CVE-2019-11331, CVE-2019-6715, CVE-2019-14697) without code changes or downtime. The document describes how the platform's threat intelligence assesses attack vectors and generates controls (network port blocks, file/executable restrictions, package blocking) to prevent exploitation, assist prioritization, and provide demonstrable compensating controls for compliance.