Executive Summary


CleanSight is a container visibility product that enumerates every image across your infrastructure, including running workloads, dormant images, shadow deployments, and orphaned artifacts in registries. It resolves image references to immutable digests and correlates registry metadata with cluster deployment state, so exposure is measured against a complete inventory

For each image, it extracts full component and transitive dependency trees, generates SBOMs in standard formats, and correlates vulnerabilities at the package level with severity, exploitability, and compliance context. Where an image is vulnerable, it recommends a compatible CleanStart hardened alternative and quantifies the projected exposure reduction, so replacement decisions carry a measurable security delta rather than a gut call.