# Comprehensive Container Security Assessment

> From $15K · Cloud & Application Security · https://cisomarketplace.services/services/comprehensive-container-security-assessment

Deep-dive security assessment of container environments, including infrastructure, images, runtime security, and orchestration platforms.

## In scope

- Container infrastructure security review
- Image security analysis (up to 50 images)
- Runtime security assessment
- Kubernetes/orchestration platform review
- CI/CD pipeline security evaluation
- Container network security analysis
- Secrets management review
- Container registry security assessment

## Deliverables

- Detailed findings report
- Custom scanning rules
- Vulnerable container inventory
- YAML security templates
- Policy-as-code examples
- Remediation scripts
- Security hardening guide
- Container security roadmap

## Tiers

### Basic: $15K

Point-in-time review of 1 Kubernetes/orchestration cluster in 1 cloud account and up to 10 container images: image vulnerability analysis, cluster configuration, secrets handling and registry settings. No CI/CD assessment.

Limits: cloud accounts 1

Includes:
- Up to 10 container images
- 1 cluster, configuration-level orchestration review
- Secrets management and registry review
- Findings report and vulnerable container inventory
- Hardening guide

Excludes:
- CI/CD pipeline security evaluation
- Runtime security assessment
- Custom scanning rules and policy-as-code
- More than 1 cluster

### Enterprise: $65K

No image cap and up to 5 clusters across up to 5 cloud accounts: infrastructure, image, runtime, orchestration, network and CI/CD pipeline review, custom policy-as-code and scanning rules, then a follow-up re-review.

Limits: cloud accounts 5, months 6

Includes:
- Unlimited images, up to 5 clusters
- Runtime and container network security assessment
- CI/CD pipeline security evaluation
- Custom policy-as-code, YAML templates and scanning rules
- Remediation scripts and roadmap
- Re-review at 6 months

Excludes:
- Remediation implementation in your clusters
- Continuous runtime monitoring
- Application-layer penetration testing of containerized apps

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=comprehensive-container-security-assessment