← Back to glossary
📦

Containerization

Security

Cloud Security Security Patch Principle of Least Privilege (PoLP) Sandboxing

OS-level virtualization that packages apps and dependencies into isolated runtime units.

Definition

Containers (e.g., Docker) isolate processes using namespaces/cgroups and bundle dependencies for consistent deployment. Security depends on least-privilege, image hygiene, patching, and runtime controls.

In plain English OS-level virtualization that packages apps and dependencies into isolated runtime units.

Why this matters

Why it matters: Vulnerable images or overly privileged containers can still lead to data exposure; isolation must be configured correctly.

Example

Example: Run containers as non-root, restrict capabilities, scan images for CVEs, and apply network policies and secrets management.