AxeraFrom detection to containment — with proof.
Detection without response is just a louder alert. Axera closes the loop: isolate the workload, verify it worked, and reopen only when it’s safe.
Contain. Verify. Reopen.
Contain
Isolate the affected workload with a targeted NetworkPolicy or AdminNetworkPolicy — hybrid enforcement across CNI and mesh.
Verify
Read the live flow graph back: did traffic actually stop? Axera confirms containment or flags it as failing.
Reopen
When the incident is resolved, lift containment — or auto-reopen if verification shows the threat is gone.
Verification, not hope.
After containment, Axera reads the live flow graph back to confirm traffic actually stopped. If the workload is still talking, the incident is flagged as failing and can auto-reopen — so a containment that silently didn't work never passes for done.
Learn the egress baseline → policy
Axera learns a workload's observed egress and proposes a matching NetworkPolicy — reusing the same shift-left synthesizer — so containment gives way to durable least-privilege instead of an open hole.
Playbooks, your call
Response playbooks package contain, verify and reopen. An auto-response master switch lets Axera act on its own — or stay advisory until you say otherwise.