Originally reported by IANS / Outlook India, May 14, 2020.
VMware Moves to Strengthen Container Security with Octarine Acquisition
Enterprise software major VMware announced plans to acquire Octarine, an early-stage Kubernetes security startup, for an undisclosed sum. The deal signals VMware’s continued push into the enterprise security market, building on its $2.1 billion acquisition of endpoint security company Carbon Black roughly seven months earlier.
What Octarine Brings to VMware
Octarine developed a security platform specifically designed for Kubernetes-based applications. Its focus was on simplifying DevSecOps workflows and securing cloud-native environments across the full application lifecycle — from development through production runtime.
Patrick Morley, General Manager and Senior Vice President of VMware’s Security Business Unit, highlighted the strategic fit:
“Protecting workloads is critical to the security of applications and data inside every organisation. Building Octarine’s innovation into the VMware security portfolio will present a major opportunity for our team to further simplify and improve security for our customers.”
— Patrick Morley, GM & SVP, VMware Security Business Unit
Integration Plans: Carbon Black Cloud and VMware Tanzu
VMware outlined two primary integration points for Octarine’s technology:
- VMware Carbon Black Cloud: Octarine’s container and Kubernetes security capabilities would be embedded directly into the Carbon Black Cloud platform, extending workload protection to containerized environments.
- VMware Tanzu: Deep hooks and integrations with the Tanzu platform — VMware’s portfolio for building, running, and managing modern applications on Kubernetes — would allow security to be applied natively within developer workflows.
The acquisition was framed as a direct extension of VMware’s “intrinsic security strategy,” which aims to protect any application, running on any cloud, on any device — without requiring bolt-on security tools.
Context: VMware’s Intrinsic Security Strategy
VMware’s approach to security centers on the idea of embedding protection directly into the infrastructure layer rather than layering separate security products on top. The Carbon Black acquisition gave VMware a strong endpoint and workload security platform. Adding Octarine extended that coverage to Kubernetes environments, which had become a critical gap as enterprises accelerated container adoption.
Container and Kubernetes security presents distinct challenges compared to traditional workload security. Attack surfaces shift rapidly as pods are created and destroyed, and policy enforcement must operate at the orchestration layer rather than at the individual host level. Octarine’s platform was built specifically to address these dynamics.
Next-Gen SOC Alliance Also Announced
Alongside the Octarine acquisition news, VMware announced the launch of its Next-Gen SOC Alliance, aimed at equipping modern Security Operations Center (SOC) teams with the context and tooling needed to improve both efficiency and detection efficacy.
The alliance integrates several major security and observability platforms with the VMware Carbon Black Cloud to deliver Extended Detection and Response (XDR) capabilities. Initial alliance members included:
- Splunk
- IBM Security
- Google Cloud’s Chronicle
- Exabeam
- Sumo Logic
“The Next-Gen SOC Alliance brings a critical mass of XDR context and capabilities to SOCs in a fully intrinsic way — one that can uniquely leverage the VMware fabric.”
— Tom Barsi, Vice President of Alliances, VMware Carbon Black
Why This Matters for DevOps and Platform Engineering Teams
For teams running Kubernetes workloads, this acquisition had several practical implications:
- Shift-left security: Integrating Octarine’s capabilities into Tanzu means security policy enforcement could move earlier into the development pipeline, aligning with DevSecOps principles.
- Unified visibility: Consolidating container security into the Carbon Black Cloud platform reduces the number of separate tools teams need to manage.
- Kubernetes-native policy: Rather than adapting traditional host-based security tools to containers, organizations using VMware’s stack would gain purpose-built Kubernetes security controls.
The acquisition terms were not disclosed publicly. As of the announcement date, the deal had not yet closed.