Key Differences
Core Function
Runtime Monitoring, Behavioral Detection & Blocking
Centralized Management & Integration for Scaled Security
Key Benefit
High-Performance, Low-Overhead Detection & Blocking (e.g., of C2, miners)
Secure Software Releases & Production Environments at Scale; Enhanced DevOps & SOC Workflow
Scope
Single Environment/Agent
Multiple Environments/Agents
Deployment
Standalone (CLI, Docker, K8s etc.)
Managed via Platform (requires agent)
Management Interface
Configuration Files / CLI
Unified Web Dashboard
GitHub Actions Integration
No
Yes
Multi-Environment View
No
Yes
Team Collaboration
Limited
Full Support
Notification Integrations
Limited
Extensive (Slack, Email, Webhooks)
Customizable Policies
Basic
Advanced
Detection Analytics
Basic
Advanced
Commercial Support
Community
SLA-based Support
Alerting Integrations
Basic (stdout, file - requires config)
Yes (GitHub PR, Slack, Webhooks)
Managed Threat Intel
No
Yes
Enterprise Support
Community
Yes
Cost
Free
Commercial Subscription
The Path: Start with the free Jibril sensor to experience Garnet's core runtime security capabilities (including detection and blocking of malicious network activity and crypto mining) in a single environment. As your needs scale to multiple environments, CI/CD integration, or centralized management, transition to the commercial Garnet Platform.
Last updated