What Docker Scout is
Docker has quietly built out their container vulnerability scanning to be comparable to other tools in the area. While, at the moment, they lack a full enterprise platform for full tracking across container lifecycles, their scanning built into the Docker Desktop app and CLI options provide much needed visibility into where vulnerabilities are coming from. They've also recently launched their own hardened images. The vendor site is www.docker.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Docker Scout covers
Docker Scout is in the catalog for these capabilities. Categories: Container Vulnerability. Catalog tags: Best for Startups.
How to evaluate Docker Scout in a security program
Use Docker Scout as a stack candidate, not as diligence evidence. The oneNorma score for Docker Scout is 3.3/10 (percentile 4). If the real gap is in Container Vulnerability, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.docker.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
