Comptech SecOps
Kubernetes-native security for the Comptech Container, AI and Data platforms: vulnerability management, policy guardrails, runtime threat detection and compliance from one console.
Overview
Security across build, deploy and runtime
Comptech SecOps protects containerised workloads across their whole life cycle. It scans images in your pipelines and registries, blocks risky deployments before they start, and watches running workloads for behaviour that indicates an attack.
For banks, it gives security and audit teams one place to see vulnerabilities, policy violations, network exposure and compliance status across every cluster, which helps meet regulatory security controls with evidence rather than spreadsheets.
Protects
One security layer for every Comptech platform
Container Platform
Scans images, enforces deploy-time policies and watches runtime behaviour for every application on your Kubernetes clusters.
AI Platform
Checks model-serving, notebook and agent workloads for vulnerabilities, risky configuration and unexpected processes or connections.
Data Pipeline
Segments lakehouse, query and pipeline services on the network and flags secrets exposed in configuration.
Bank audit and compliance
Compliance reports and risk-ranked findings that help meet regulatory security controls.
Features
Secure the supply chain
Find and stop vulnerable or untrusted images before they reach production.
Vulnerability management
Identify and prioritise vulnerabilities in container images and Kubernetes infrastructure for remediation.
Image scanning in CI/CD
Check images and deployment YAML in your pipelines; a policy violation returns a non-zero result so the build can fail.
Admission control
An admission controller blocks deployments or updates that violate enforced policies.
Signature verification
Verify Cosign image signatures and block unsigned or unverified images at deploy time.
SBOM generation
Generate SPDX software bills of materials from scanned images, so you know every component you run.
Registry integrations
Connect to your image registries for continuous scanning of the images you build and pull.
Runtime
Detect and contain threats
Build, deploy and runtime policies
Security policies apply at every stage, with ready-made policies and your own rules.
Runtime threat detection
Learns each workload's normal processes and alerts on deviations from the baseline; can scale down violating pods.
Network segmentation
A network graph of observed traffic, with network policies generated and simulated from real flows.
Risk ranking
Deployments ranked by risk, combining vulnerabilities, configuration and runtime activity, so teams fix what matters first.
Secrets and configuration checks
Policies flag risky settings such as privileged containers and secrets placed in environment variables.
Compliance
Automated checks against industry standards including CIS Kubernetes, NIST SP 800-190 and 800-53, PCI DSS and HIPAA, with reports.
Operations
Run it across every cluster
Central multi-cluster management
One central console and dashboard covers all secured clusters in your DC and DR sites.
SIEM and alerting integrations
Send alerts and audit events to syslog-based SIEMs and Splunk, and notify teams through Slack, Jira, PagerDuty, email or webhooks.
Local security operations support
Comptech engineers in Bangladesh tune policies, triage findings and support you under a Bronze, Silver or Gold SLA.
Architecture
Central visibility, enforcement in every cluster
A central service holds policies, scan results and reports. A lightweight sensor and admission controller in each secured cluster enforce policy and collect runtime and network data, so every platform is protected the same way.
Capabilities
Protection at every stage
Build
- Controls
- Image scanning in CI, signature checks, SBOM generation
- Outcome
- Vulnerable or untrusted images fail the pipeline
Deploy
- Controls
- Admission control, deploy-time policies, configuration and secrets checks
- Outcome
- Risky workloads are blocked before they run
Runtime
- Controls
- Process baselines, runtime policies, network graph
- Outcome
- Suspicious activity is detected and can be contained
Network
- Controls
- Policy generation and simulation from observed traffic
- Outcome
- Services only talk to what they need
Compliance
- Controls
- CIS Kubernetes, NIST SP 800-190 and 800-53, PCI DSS, HIPAA checks
- Outcome
- Audit-ready reports that help meet regulatory controls
Operations
- Controls
- Risk ranking, central console, SIEM and chat integrations
- Outcome
- Teams see and fix the highest risks first
Included
With every Comptech product
On premises or private cloud
Runs in your own data centre, so data stays in the country. Open formats and standard APIs avoid lock-in.
Single sign-on
Keycloak with AD/LDAP, MFA and group-based roles across every tool.
Secrets vault
Credentials and keys held centrally in an OpenBao vault, not in configuration files.
DC/DR design
Designed for a primary data centre and a disaster recovery site.
Local support and SLAs
Comptech engineers in Bangladesh, with Bronze, Silver or Gold SLAs.
Pilot and training
A pilot in 4 to 6 weeks, plus training for your team.
From pilot to production
01
Discover
Agree the first use case, the systems involved and the success criteria.
02
Pilot
Deploy on your infrastructure and prove the use case in 4 to 6 weeks.
03
Production
Add the DR site, single sign-on and the remaining teams and workloads.
04
Support
Local support under a Bronze, Silver or Gold SLA, with training for your team.
Questions
Does it help us meet Bangladesh Bank requirements?
It helps meet regulatory security controls, such as vulnerability management, access control, network segmentation and audit evidence. It is not a certification, and we map its reports to your own control framework.
Which platforms does it protect?
Kubernetes workloads on the Comptech Container Platform, including the workloads of the Comptech AI Platform and Comptech Data Pipeline.
How long does a pilot take?
A typical pilot runs 4 to 6 weeks on your hardware or private cloud, with one agreed use case and success criteria set at the start.
What support do you offer?
Local support from Comptech engineers in Bangladesh, with Bronze, Silver and Gold SLA levels. We also train your team to run the platform day to day.
Are we locked in?
No. The platforms use open formats and standard APIs, so your workloads and data stay portable.
Request a pilot
Tell us about your clusters and your audit requirements. We'll plan a 4 to 6 week SecOps pilot.
Related services