Automated Moving Target Defense
Hopr automates the rotation of workload credentials at a high frequency
Threat actors penetrate networks and access workloads from anywhere, then move laterally, discover static identity and secret credentials, and attack valuable resources.
Provide workloads with special “sidecars” that frequently rotate workload access credentials to restrict threat actor movement within containerized environments.
Threat actors sniff unsecured transport and obtain keys and other information to launch attacks.. Ensuring “mTLS everywhere” is challenging, impractical, and costly.
Our sidecars use our patented SEE™ protocol to create end-to-end encrypted communication channels without a key exchange between workloads.
Automated PKI certificates used for workloads have a chain of trust that ends with the certificate authority, and not the workload. Each certificate replacement represents an entirely new identity that lacks verification.
We assign a workload its identity credential when it is first registered and receives a Hopr sidecar. The ID rotates as the workload conducts sessions with other workloads. Trust is verified at each session.
