Hosted apps
The hosted apps section shows workloads deployed on top of the host — containers and applications, not infrastructure services.
Containers
Docker containers and Kubernetes pods are listed with:
- Workload name — container name or pod hint
- Image — the container image reference
- State — running, exited, restarting
- Restarts — restart count (high count may indicate a crashloop)
- Flags — security indicators
Security flags
Each container is checked for common security issues:
| Flag | Severity | Meaning |
|---|---|---|
| Floating latest tag | P2 | Image tag is latest — deploys are not reproducible |
| Suspected crashloop | P1 | High restart count while running |
| Secrets in environment | P1 | Env vars with names like PASSWORD, TOKEN, API_KEY |
| Host IPC namespace | P1 | Container shares host IPC (--ipc=host) |
| Host hostname namespace | P1 | Container shares host UTS (--uts=host) |
| Privilege escalation | P2 | no-new-privileges flag not set |
| Host device exposed | P1 | Direct access to sensitive host devices |
| Logs discarded | P2 | Log driver set to none |
| Stale image | P1/P2 | Image older than 6-12 months |
| Built via docker commit | P2 | Image not built from a Dockerfile |
| Long-running drift | P3 | Container running for months without restart |
Click Details on any container row to see a full explanation of each flag and how to fix it.
Applications
Application inventory (PHP, Node.js, Java, Python apps detected on disk) is coming in a future release.