Twistlock Architecture

The Twistlock Intelligence Stream is comprised of over 30 distinct threat intelligence feeds to provide you with accurate, up-to-date vulnerability information about your environment. This data is ingested by the Twistlock Console, our dashboard which runs as a container within your environment.

Defenders protect your containerized environment according to the policies you set in Console. In the Architecture diagram, we also highlight our CI integrations, either through our native Jenkins plugin or through twistcli, our command line scanner.

Additionally, you’ll notice that Twistlock is entirely-API driven – so you can access data within any data analytics or SIEM of your choosing – and integrate Twistlock with any identity and access management frameworks you are using at your organization.