What BlueRock is
Bedrock Systems has created a hypervisor that can watch for malicious interactions with the Linux kernel, and other suspicious read/write operations. This makes them an extremely powerful tool for detecting container escapes and attackers getting funky with core Linux systems, but it comes at the cost of having a custom deployment for your node infrastructure - which may or may not be worth it depending on your security posture. The vendor site is bedrocksystems.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What BlueRock covers
BlueRock is in the catalog for these capabilities. Catalog tags: Nerdy and Best for Enterprise.
How to evaluate BlueRock in a security program
Use BlueRock as a stack candidate, not as diligence evidence. The oneNorma score for BlueRock is 5/10 (percentile 46). A dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what bedrocksystems.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
