StackRox

What StackRox does

StackRox was a Kubernetes-native security company headquartered in Mountain View, California, that built an open-source platform for protecting containerized applications, Kubernetes infrastructure, and serverless workloads. The platform delivered coverage across the full build-and-runtime lifecycle, including vulnerability scanning for container images, configuration analysis of Kubernetes objects, runtime visibility with enforcement, policy enforcement to block risky deployments, and automated compliance validation against CIS, NIST, PCI, and HIPAA standards. Core technical components included Kubernetes Security Posture Management (KSPM), integration with CI/CD pipelines and image registries, and a real-time interactive dashboard for monitoring metrics across namespaces and clusters.

The company monetized through a combination of open-source community adoption on GitHub (free download, modification, and extension by security teams) and enterprise distribution. Following its 2021 acquisition by Red Hat — an IBM subsidiary — the technology was rebranded as Red Hat Advanced Cluster Security for Kubernetes and is now bundled with the Red Hat OpenShift Platform Plus enterprise subscription, sold as a managed cloud service on AWS Marketplace, and made available through a 60-day self-supported trial. Target customers span DevSecOps teams implementing security into CI/CD pipelines, platform engineering teams managing Kubernetes infrastructure, and application security teams responsible for container workload protection. Total venture funding raised prior to acquisition was approximately $65.5M across rounds from 2015 to 2020, with investors including Sequoia Capital, Menlo Ventures, Redpoint, Amplify Partners, Hewlett Packard Enterprise, Highland Capital Partners, and Avalon Ventures.

Name

StackRox

Legal name

StackRox, Inc.

Website

https://stackrox.com

Company type

Private

Founded year

2018

Operating status

Acquired

Headcount range

51–100 employees

Ownership category

akta.pro rank

Product category

Container and Kubernetes Security Software

NAICS

Computer Systems Design and Related Services (5415)

SIC

Services-Prepackaged Software (7372)

akta.pro industry

PRIMARYHDADADAE

Kubernetes & Container Security (KSPM/KCSPM, Runtime)

Hardware, Technology & Telecom/Cybersecurity/Cloud Security (CNAPP, CSPM, CWPP)

SECONDARYHDADACAE

Container & Kubernetes Application Security

Hardware, Technology & Telecom/Cybersecurity/Application & API Security

SECONDARYHDABAHAO

Cloud Security for Containers & Kubernetes (KSPM/Kubernetes Security)

Hardware, Technology & Telecom/Cloud & Data Center Infrastructure/Cloud Security & Compliance Infrastructure

SECONDARYHDABAJAF

Cloud-Native/Kubernetes Observability

Hardware, Technology & Telecom/Cloud & Data Center Infrastructure/Observability, Monitoring & AIOps for Cloud

Keywords

• Container security
• Kubernetes security
• Cloud-native security
• DevSecOps platform
• Container image scanning

Headquarters

HQ city

Mountain View

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations

Revenue model

1. Enterprise Subscription (Red Hat): Red Hat Advanced Cluster Security for Kubernetes is included with Red Hat OpenShift Platform Plus subscription, sold as part of a comprehensive enterprise container platform subscription

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels4 records

Core offering

StackRox built an open-source Kubernetes-native security platform that secures containerized applications and Kubernetes infrastructure across the entire software lifecycle, from build through runtime. The platform provides vulnerability image scanning, Kubernetes configuration analysis, runtime visibility with enforcement capabilities, and policy enforcement for DevSecOps teams. Following Red Hat's 2021 acquisition, the technology is sold as Red Hat Advanced Cluster Security for Kubernetes, bundled with Red Hat OpenShift Platform Plus and available as a managed cloud service on AWS Marketplace.

Product overview

StackRox evolved into Red Hat Advanced Cluster Security for Kubernetes after being acquired by Red Hat. The original StackRox product was an open-source Kubernetes security platform released on GitHub, offering container and Kubernetes security across the build and runtime lifecycle with image scanning, configuration analysis, and runtime visibility capabilities. This technology became the foundation for Red Hat Advanced Cluster Security for Kubernetes, which is now included with Red Hat OpenShift Platform Plus and available as a cloud service for protecting Kubernetes-based workloads and containers.

Differentiator

Problem solved

Functional benefit

Products and services

• StackRox Open-Source Kubernetes Security Platform An open-source Kubernetes security platform providing container and Kubernetes security across the build and runtime lifecycle. It offers image scanning for vulnerabilities, configuration analysis for Kubernetes objects, and runtime visibility with enforcement capabilities, allowing security teams to freely use, modify, and extend its policies to meet internal standards.
• Red Hat Advanced Cluster Security for Kubernetes A Kubernetes-native security platform (formerly StackRox) that supports a holistic security strategy across applications and application platforms, providing vulnerability management, policy enforcement, and compliance checking for container workloads and Kubernetes infrastructure. It is included with Red Hat OpenShift Platform Plus and available as a managed cloud service.

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature8 records

Scale indicators2 records

Recent moves6 records

Expansion highlights4 records

Direct peers

• Aqua Security: Aqua Security is a direct competitor offering a full lifecycle cloud-native application protection platform (CNAPP) for containers, Kubernetes, and serverless — overlapping with StackRox's image scanning, runtime protection, and compliance capabilities. Both target DevSecOps teams securing containerized workloads across build and runtime.
• Sysdig: Sysdig provides a CNAPP with strong Kubernetes security posture management (KSPM), runtime threat detection (Falco-based), and vulnerability management — directly comparable to StackRox's KSPM and runtime visibility capabilities. Both compete for the same DevSecOps and platform engineering buyer in enterprise Kubernetes environments.
• Wiz: Wiz is a leading CNAPP provider that has expanded aggressively into Kubernetes and container security, competing head-on with StackRox-derived technology for cloud security posture management, workload protection, and agentless Kubernetes scanning across multi-cloud environments.
• Snyk: Snyk's developer security platform includes container and Kubernetes security scanning capabilities that overlap with StackRox's image scanning and vulnerability management features. Both target developer and DevSecOps personas integrating security into CI/CD pipelines.
• Tigera: Tigera, the commercial steward of the Project Calico open-source project, offers Kubernetes-native network security, observability, and policy enforcement that overlaps with StackRox's runtime visibility and policy enforcement capabilities for Kubernetes environments.

Broad incumbents

• Prisma Cloud (Palo Alto Networks): Prisma Cloud is Palo Alto Networks' CNAPP suite covering container, Kubernetes, host, and serverless security with code-to-cloud coverage. It competes with StackRox but as part of a much broader Palo Alto Networks security portfolio aimed at enterprise customers seeking a single-vendor platform.
• JFrog: JFrog's Artifactory and Xray platform provides binary repository management with built-in container image scanning and security, competing with StackRox's image scanning capabilities. JFrog serves a broader DevOps platform audience rather than specializing in Kubernetes security.
• Tenable: Tenable is an established vulnerability management and exposure platform vendor that has extended into cloud and container security through Tenable Cloud Security and Nessus. It competes with StackRox's vulnerability management capabilities as part of a much broader security portfolio.

Emerging players

• Anchore: Anchore provides software composition analysis and container security scanning focused on image vulnerability management and SBOM generation. While smaller in scope than StackRox's full KSPM offering, Anchore is a comparable emerging player in container security for regulated industries.
• Sonatype: Sonatype's Nexus platform provides software supply chain security and container image scanning through its Sonatype Lifecycle and Container Security products. It is comparable to StackRox's vulnerability management and supply chain security positioning, though broader in scope beyond Kubernetes.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/stackrox

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds5 records

Investors8 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about StackRox