Hot Product Roundup – Summer 2025

Jun 19, 2025

Yossi Ben Naim
VP of Product Management

We’ve been busy! Our latest summer updates introduce powerful new capabilities to help you detect, respond to, and manage threats across your cloud-native workloads, and cloud environments – all from one unified platform.

Here’s what’s new in ARMO Platform:

📊 Coverage: Know What’s Protected

Get instant clarity on what’s monitored, and what’s not.
We’ve added a new widget to the Threat Detection dashboard:

Coverage Widget – Easily see which Kubernetes clusters and cloud accounts are being monitored for runtime threats.

👉 Why it matters: You gain clear visibility into security gaps

📊 Top Threats Visibility

We’ve added a new widget to the Threat Detection dashboard:

Top Threats Widget – Quickly identify recurring or critical threats across your environment with aggregated incident data.

👉 Why it matters: You gain immediate access to threat trends, so you can focus where it counts.

🧠 Workload Learning Status: Anomaly Detection Readiness at a Glance

Monitor profiling progress for each workload.
You can now view the learning phase status of each workload directly in the platform. Once a workload completes learning, anomaly detection kicks in automatically.

👉 Why it matters:
This ensures you’re not flying blind – you know exactly when threat detection becomes fully active for each workload.

🛡️ Blast Radius Visualization: See the Full Impact of a Breach

Introducing the new Blast Radius tab in the Incident View.
It visualizes the potential extent of damage a breach could cause, highlighting which systems, services, or data could be impacted by a compromised account or attack.

👉 Why it matters:

Limit attack spread by understanding how far it could go
Prioritize remediation based on potential impact
Maintain operational continuity during active incidents

⚡ Respond Faster & Audit Every Action

Take control – without leaving the incident view.
From the new Response tab, you can now pause/stop the affected container, or kill a malicious process directly from the incident view.

We’ve also introduced full response auditing – so every action taken is logged with the who, what, when, and outcome.

👉 Why it matters: