Vertically integrated automatic threat level determination for containers and hosts in a containerization environment

A container system comprising:

• one or more processors;
• memory storing one or more application containers, each application container including computer-readable instructions and initiated via a container service and isolated using operating system-level virtualization, the memory further storing code instructions, the code instructions, when executed by the one or more processors, cause the one or more processors to:
• probe for one or more threats within an application container in the container system, each threat being at least one of a vulnerability and a non-conformance with a benchmark setting, the application container including computer-readable instructions, and the application container initiated via a container service and isolated using operating system-level virtualization;
• probe for one or more threats within a host of the container service;
• generate a threat level assessment score based on results from the probing of the one or more threats of the application container and the one or more threats of the host;
• generate a report for presentation in a user interface including the threat level assessment score and a list of threats discovered from the probe of the one or more threats of the application container and the host;
• and
• transmit the report to a client device of a user for presentation in the user interface, wherein the user interface is a graph view, wherein the application container is represented in the user interface by a container graphical indicator, wherein the threat level assessment score for the application container is indicated by a threat score graphical indicator adjacent to the container graphical indicator, and wherein connections between application containers are indicated by arrow connection indicators.

A non-transitory computer storage readable medium configured to store instructions, the instructions that when executed by a processor, cause the processor to:

• probe for one or more threats within an application container in a container system, each threat being at least one of a vulnerability and a non-conformance with a benchmark setting, the application container including computer-readable instructions, and the application container initiated via a container service and isolated using operating system-level virtualization;
• probe for one or more threats within a host of the container service;
• generate a threat level assessment score based on results from the probing of the one or more threats of the application container and the one or more threats of the host;
• generate a report for presentation in a user interface including the threat level assessment score and a list of threats discovered from the probe of the one or more threats of the application container and the host;
• and
• transmit the report to a client device of a user for presentation in the user interface, wherein the user interface is a graph view, wherein the application container is represented in the user interface by a container graphical indicator, wherein the threat level assessment score for the application container is indicated by a threat score graphical indicator adjacent to the container graphical indicator, and wherein connections between application containers are indicated by arrow connection indicators.