This message was deleted.
# neuvector-security
a
This message was deleted.
q
Well, you can essentially baseline process rules instantly by way of the zero-drift mode, but that kind of assumes you have some level of “hardened” containers that you trust in.
This is a question that comes up now and then, and indeed derivative to the “that may take time” you mentioned.
But, does it? 🙂
Consider the scenario where your apps are in a a phase of dev/test. (I hope this is a thing. 😄 )
During that time is when you’d let NeuVector be in discover mode. When the app moves to a Q/A or even straight to Prod, go use those rules.
Essentially, this is 0 extra time.
👍 1
and very very little work to get a high level of protection and visibility.