Product

Mondoo Platform Features and Capabilities Integrations Pricing

Solutions

Financial Services Manufacturing Healthcare

Resources

Blog Whitepaper Support

Open Source

cnquery cnspec

Get started

Be up and running in minutes

Get started right now

Open source

Download our core components and start securing your environment now.

cnquery

Our GraphQL-based asset inventory tool that's infrastructure agnostic and extensible.

cnspec

Our GraphQL-based policy-as-code tool for build and runtime security

Enterprise

Scale up security automation processes across your entire organization, starting at $12,000 per year.

Here’s what you get:

Enterprise-grade scaling

Enterprise policies

Continuous planning

Asset network graph

Compliance mapping

Dashboards and reports

Book a demo

Trusted by industry-leading companies around the globe

Mondoo secures every layer of your app infrastructure, ensuring strength across all links.

Features

Open source

free

Enterprise

from $12,000 per year

Cloud, K8s, OS, SaaS, and API scanning

Scan all your systems with one unified framework to find security issues and misconfigurations. Run it anywhere from development to production. Avoid tool-sprawl and consolidate findings.

Kubernetes operator

Simplifies and automates the integration with Kubernetes and allows you to scan all of its objects (including pods, deployments, containers, and more).

Extensible providers

Providers allow cnquery and cnspec to connect to systems, collect their data, and run checks against them. The provider system is fully extensible via plugins, which allows you to add any target you can image, including internal APIs, custom apps, or devices. Plugins can also collect and structure data from 3rd party tools.

Data collection

Collect full asset inventories across all supported systems in cloud, on-prem, images, endpoints, and services. Data collection can be fully customized.

OSS policies

Managed security policies to find the most important issues across all major technologies and systems.

Base Vulnerability Management

Detects vulnerabilities for OSs, packages, applications, and code runtimes across machines, endpoints, containers, and images. Limited API requests for scans.

Risk-based Vulnerability Management

Detect vulnerabilities for OSs, packages, applications, and code runtimes across machines, endpoints, containers, and images. Adds risk factor analysis and exploitability for the best prioritization.

Security Posture Management

Find important security issues across cloud, Kubernetes, identities, services and endpoints. Mondoo eliminates the noise and prioritizes findings that will actually get you hacked or fail your audits. Exposed systems, access to user data, insecure admins and more.

Compliance Analysis

Mondoo fully automates evidence collection for your audits: Asset inventories and checks are mapped to compliance controls and can be fully customized. Mondoo also detects compliance issues and informs developers before they reach production.

Asset Inventory

Automatically discover and inventory all assets across cloud, on-prem, identities, and devices. Mondoo's asset inventory is not only automated, but also fully customizable to include all the data you need.

Full-text search

Quickly get answers to your questions. Mondoo is built on a rich data lake of assets, configurations, and security findings. This means you can ask any question and get the results you need.

Enterprise deployments

Mondoo provides standalone instances for enterprise customers and also supports isolated on-prem environments. Gain the flexibility of Mondoo's security suite wherever you need it without worrying about spillover effects.

OAuth and SAML single sign-on

Support enterprise-grade authentication across a variety of technologies and services. Add entire teams and organizations with SSO integrations.

SCIM user provisioning

Mondoo supports user identity lifecycle management via SCIM, to automatically create and remove users who have access to your security data.

Compliance reports

Automatically gather evidence for your compliance audits. These reports include asset inventory information, security checks, and vulnerabilities that can be fully customized to your upcoming audit. Avoid manual work and put it on autopilot.

Premium support

We are known for finding fast resolutions to problems, instead of only posting fast response times. We care about the service we offer and respond to issues and feature requests to deliver the best service to you.

Notification integrations

Mondoo integrates with 3rd party systems to offer notifications across chat, email, and custom applications, including Slack, Teams, and Jira.

Data Export and automation

Anything you see can be automated. Mondoo's APIs give rich access to provisioning and data export automation. We also offer native integrations for data exports in the cloud, including BigQuery and S3.

Open source

free

Enterprise

from $12,000 per year

Cloud, K8s, OS, SaaS, and API scanning

Scan all your systems with one unified framework to find security issues and misconfigurations. Run it anywhere from development to production. Avoid tool-sprawl and consolidate findings.

Kubernetes operator

Simplifies and automates the integration with Kubernetes and allows you to scan all of its objects (including pods, deployments, containers, and more).

Extensible providers

Data collection

Collect full asset inventories across all supported systems in cloud, on-prem, images, endpoints, and services. Data collection can be fully customized.

OSS policies

Managed security policies to find the most important issues across all major technologies and systems.

Base Vulnerability Management

Detects vulnerabilities for OSs, packages, applications, and code runtimes across machines, endpoints, containers, and images. Limited API requests for scans.

Risk-based Vulnerability Management

Detect vulnerabilities for OSs, packages, applications, and code runtimes across machines, endpoints, containers, and images. Adds risk factor analysis and exploitability for the best prioritization.

Security Posture Management

Compliance Analysis

Asset Inventory

Full-text search

Quickly get answers to your questions. Mondoo is built on a rich data lake of assets, configurations, and security findings. This means you can ask any question and get the results you need.

Enterprise deployments

OAuth and SAML single sign-on

Support enterprise-grade authentication across a variety of technologies and services. Add entire teams and organizations with SSO integrations.

SCIM user provisioning

Mondoo supports user identity lifecycle management via SCIM, to automatically create and remove users who have access to your security data.

Compliance reports

Premium support

Notification integrations

Mondoo integrates with 3rd party systems to offer notifications across chat, email, and custom applications, including Slack, Teams, and Jira.

Data Export and automation

FAQs

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique.

Question text goes here

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

Question text goes here

Reveal vulnerabilities, lost assets, and policy violations before they become exploits.

Get started

Product

Mondoo Platform Features and Capabilities Integrations Pricing

Solutions

Financial Services Manufacturing Healthcare

Open Source

cnquery cnspec

Resources

Blog Whitepaper Support

Company

About Contact Newsroom

Made by tonik