Sysdig Usage Report Finds Shifting Container Security Left is Not Enough
Sysdig, Inc., the secure DevOps leader, today announced findings from its Sysdig 2021 Container Security and Usage Report. While usage reveals organizations are shifting left by scanning images during the build phase, DevOps teams are still leaving their environments open to attack. The report also looks at trends, finding a 310 percent growth in container density since 2017.
The fourth annual report reveals how global Sysdig customers of all sizes and across industries are using and securing container environments. This real-world, real-time data provides insight into usage of the nearly one billion containers Sysdig customers run yearly, including security risks, container utilization, and services used. Read the Sysdig 2021 Container Security and Usage blog.
Among its findings, the report states that while 74 percent of customers are scanning before deployment, still more than half (58 percent) of containers are running as root. There are some containers that should run as root—security and system daemons for example—but this is a small portion of total containers. These risky configurations leave easy access to potentially compromise the system and access sensitive data. This finding stresses the need for security throughout the lifecycle of a container image—fixing vulnerabilities is not enough.
Highlights From the Report
Container density grows 170% since 2018
Over the past three years, the median number of containers-per-host more than doubled from 15 in 2018 to 41 today, indicating a growth in efficiency and a shift in cost savings as containers mature. This reveals a continued focus on optimization.
Prometheus continues to grow, 35% YoY
Open source adoption is broader than just Kubernetes as organizations are shifting toward Prometheus as the standard approach to monitoring container environments. The use of Prometheus metrics among Sysdig customers grew 35 percent year-over-year.
Docker down, containerd and CRI-O up 4X
In 2017, Docker represented 99 percent of containers in use at that time. Today, that number has fallen to 50 percent, down from 79 percent in October 2019. While Docker revolutionized containers, organizations are rapidly switching to newer runtimes like containerd and CRI-O.
21% of containers live less than 10 seconds
The ephemeral nature of containers is a unique efficiency advantage, yet it can be a challenge in managing issues around security, health, and performance. The short life of containers reaffirms the need for container-specific tools for security and monitoring. For example, organizations need metric collection with intervals of less than 10 seconds and a detailed record of what occurred when the container was alive.
“With the high-profile breaches we are seeing and the accelerated adoption of containers in production, the container security risk is now on the radar of CISOs. Across millions of containers that we have studied, it’s clear that organizations are shifting security left, but they are neglecting critical best practices,” said Suresh Vasudevan, chief executive officer of Sysdig. “Container security has to span the entire software development lifecycle. Until organizations fix risky configurations, protect their runtime environments, and invest in container forensics, we will see an increase in container security breaches. I expect we will see several high-impact breaches before we release our next report.”
Other Interesting Findings
- Falco, the open source runtime project for cloud-native environments created by Sysdig and donated to the CNCF, has seen a 300 percent increase in Docker Hub downloads over the last year.
- The use of golang increased to 66 percent, a 470 percent jump since last year.
- 63 percent of container images are replaced within two weeks or less, signifying a more frequent code deployment rate.
Learn More About this Report
- Download the full Sysdig 2021 Container Security and Usage Report.
- Download the infographic.
- Read the usage report blog.
- Join the webinar Real-World Insights: Dig into Sysdig’s Container Security and Usage Report on Jan. 21 at 10am PST to walk through the report with the author.
About Sysdig
Sysdig is driving the secure DevOps movement, empowering organizations to confidently secure containers, Kubernetes, and cloud services. With the Sysdig Secure DevOps Platform, cloud teams secure the build pipeline, detect and respond to runtime threats, continuously validate compliance, and monitor and troubleshoot cloud infrastructure and services. Sysdig is a SaaS platform, built on an open source stack that includes Falco and sysdig OSS, the open standards for runtime threat detection and response. Hundreds of companies rely on Sysdig for container and Kubernetes security and visibility. Learn more at www.sysdig.com.
To view this piece of content from cts.businesswire.com, please give your consent at the top of this page.
View source version on businesswire.com: https://www.businesswire.com/news/home/20210113005319/en/
Contact information
Amanda McKinney Smith
(703) 473-4051
amanda.smith@sysdig.com
About Business Wire
For more than 50 years, Business Wire has been the global leader in press release distribution and regulatory disclosure.
Subscribe to releases from Business Wire
Subscribe to all the latest releases from Business Wire by registering your e-mail address below. You can unsubscribe at any time.
Latest releases from Business Wire
IO Interactive Announces Olivier Perbet as Chief Marketing and Revenue Officer2.7.2025 16:00:00 EEST | Press release
IO Interactive, the award-winning developer and publisher behind the globally-acclaimed HITMAN franchise, is proud to announce the promotion of Olivier Perbet to Chief Marketing and Revenue Officer (CMRO). In this expanded role, Olivier will now oversee both marketing and revenue operations across the studio’s portfolio, including Digital and Physical Sales, Business Development, and go-to-market strategy, as IOI enters an exciting new chapter of growth. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20250702593970/en/ © IO Interactive A/S Olivier joined IO Interactive as Chief Marketing Officer in 2023, bringing with him over 20 years of experience across gaming, consumer electronics, and entertainment. Since then, he has played a key role in scaling IOI’s global publishing capabilities, supporting the set-up of IOI Partners and delivering standout campaigns. Under Olivier’s leadership, IOI recently celebrated major milestone
Seoul Semiconductor’s World’s No.1 Technology Targets EV and Autonomous Vehicle Markets2.7.2025 16:00:00 EEST | Press release
Seoul Semiconductor Co., Ltd. (KOSDAQ: 046890), the world’s No. 1 company in LED backlight, announced on July 2nd that its proprietary No-wire technology, WICOP, has been supplied to the automotive market in the form of Mini LED displays since May. As the world’s first No-wire LED technology, WICOP has already proven its performance across various applications—including smartphones, TVs, lighting, and automotive headlamps. Recognized for its superior brightness and durability even in extreme automotive environments, WICOP has now officially entered the automotive display market. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20250702244031/en/ [Figure] Comparison of 1st-Generation LED and 2nd-Generation ‘WICOP’ Structure (Image: Seoul Semiconductor) The No-wire WICOP technology applied to Mini LED enables ultra-slim display designs, making it ideal for full array local dimming. This allows for deeper contrast and higher bright
Barilla Launches 7th Edition of Good Food Makers to Shape the Future of Food2.7.2025 15:20:00 EEST | Press release
Barilla officially opens applications for Good Food Makers 2025, its open innovation program dedicated to startups and innovative companies focused on creating a more sustainable and connected food system. Now in its seventh edition, the program welcomes a new format — Good Food Makers – ECOSYSTEM — developed in collaboration with Almacube, the innovation hub of the University of Bologna and Confindustria Emilia. This year’s goal is to build a true innovation ecosystem by involving Barilla’s value chain partners and accelerating the adoption of emerging technologies. Three selected startups will join a four-week co-development journey with Barilla professionals and partner companies, working side-by-side to create impactful solutions across the entire food chain — from field to fork. Applications are open until the end of July, with the program running from September to January 2026, concluding with the Innovation Day. “Good Food Makers reflects our commitment to open innovation that g
SE Labs Award Reinforces NetApp Status as the Most Secure Storage on the Planet2.7.2025 15:00:00 EEST | Press release
NetApp® (NASDAQ: NTAP), the intelligent data infrastructure company, today announced that it was recognized as a standout performer in cybersecurity in the SE LABS ® Awards 2025. NetApp won the 2025 SE Labs Award for Enterprise Data Protection, validating NetApp’s status as the most secure storage on the planet. This recognition as a winner of a 2025 SE Labs Award is a result of NetApp’s exceptional innovation in cyber resiliency to deliver NetApp ONTAP® Autonomous Ransomware Protection with Artificial Intelligence (ARP/AI), which was tested and validated by SE Labs. NetApp ARP/AI demonstrated 99 percent detection of tested, advanced full-file encryption ransomware attacks with zero false positives, indicating a strong ability to operate in a business context without contributing to alert fatigue. “Great security doesn’t just happen—it’s built, tested and proven,” says Simon Edwards, Founder and CEO of SE Labs. “Behind every high performing security product is a team committed to excel
CroíValve Announces Funding from Horizon Europe EIC Accelerator2.7.2025 15:00:00 EEST | Press release
CroíValve, a pioneering medical device company innovating a better way to help more patients suffering from Tricuspid Regurgitation (TR), was awarded funding from Horizon Europe’s European Innovation Council (EIC) Accelerator Programme. This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20250702306192/en/ DUO™ Transcatheter Tricuspid System Part of the EU’s Horizon Europe 2021-2027 Research and Innovation Programme, the EIC Accelerator Programme provides transformational funding to high-potential, high-risk start-ups, scale-ups and subject matter experts. This award includes grant funding of €2.5 million, combined with an equity investment of €10 million in CroiValve’s next financing. The latest competition included 959 applications, with only 40 awards across 16 countries. Almost one third of the selected companies are led by a woman and CroiValve are incredibly proud to be one of this group. “Securing European Innovation Council
In our pressroom you can read all our latest releases, find our press contacts, images, documents and other relevant information about us.
Visit our pressroom