ARMO Platform (Kubernetes & Cloud Runtime Security)

Cyber Armor Ltd., doing business as ARMO, is a company registered in Israel and co-founded by CEO Shauli Rozen and CTO Ben Hirschberg. It created and powers Kubescape, an open-source Kubernetes security project that became a CNCF incubating project, and raised a 30 million USD Series A led by Tiger Global in 2022.

The ARMO platform builds on Kubescape to secure Kubernetes, containers and cloud applications using runtime insight. An eBPF sensor learns the normal behavior of each application and detects anomalies, with automated response under the cloud application detection and response (CADR) model. The platform also provides Kubernetes and cloud security posture management, runtime-based vulnerability prioritization, registry and image scanning, compliance checks and hardening recommendations, and can be deployed on-premises for sovereign environments. Logos on the site include Akamai, Broadcom, Dell, Ericsson, Nokia and Verizon.

• Cloud application detection and response: Detects anomalous behavior with eBPF and responds automatically.
• Kubernetes posture management: Scans clusters against NIST, NSA-CISA and MITRE frameworks.
• Runtime vulnerability management: Prioritizes CVEs by whether vulnerable code is actually loaded.
• Image and registry scanning: Secures container images and registries before deployment.
• Runtime-based hardening: Generates network and security policies from observed application behavior.
• On-premises option: Runs the full platform inside the customer's own environment.

A bank running Kubernetes in its own data center can deploy the platform on-premises to check clusters against security baselines and detect intrusions. An e-wallet provider can cut patching workload by fixing only vulnerabilities in loaded code. A telecom operator can generate network policies from real traffic to isolate microservices.

Runtime reachability analysis filters out vulnerabilities that are never loaded, with the vendor claiming more than 90% less CVE-related work. Behavioral detection spots zero-day and in-cluster attacks that signature tools miss. Teams can start with free open-source Kubescape and move to the managed platform without changing tooling. On-premises deployment keeps all security data inside the organization for regulated or sovereign workloads.

Kubernetes has become the standard platform for running microservices, but container image vulnerabilities and cluster misconfigurations generate large volumes of alerts. Runtime context and eBPF are increasingly used to separate exploitable risks from noise. Vietnamese fintech, e-commerce and telecom companies running Kubernetes on public or private clouds need tools that fit both cloud and on-premises clusters.

Operated by Cyber Armor Ltd. d.b.a. ARMO, registered in Israel. Raised a 30 million USD Series A in April 2022 led by Tiger Global with Hyperwise Ventures, Pitango First and Peled Ventures. Kubescape reached CNCF incubation in February 2025 and reports 11K+ GitHub stars and 100K+ deployments. ARMO reports SOC 2 certification and a Gartner Cool Vendor mention.