Akamai Guardicore Segmentation
Software-based microsegmentation with traffic visibility.
Network Segmentation
Network segmentation and microsegmentation
One compromised machine can no longer reach everything else.
Addresses 241 stories in our coverage in the last 90 days 3 products that provide it
What it is
Dividing the network so that systems can only talk to what they need, from coarse zones (office, servers, production) down to rules per workload.
How to value it
Ransomware becomes a company-wide outage when it can spread freely from the first infected laptop. Segmentation limits the blast radius: an incident in one zone stays there, which can be the difference between a bad day and weeks of downtime.
Questions to ask a vendor
- 1Can it map current traffic flows before we enforce any rules?
- 2Does it work across data centre, cloud and endpoints?
- 3How do we avoid breaking business applications during rollout?
- 4Can it isolate a segment quickly during an incident?
For your risk register
- Risk
- Malware spreads from one system to the whole environment.
- Control
- Segmentation of critical systems with default-deny rules.
- Owner
- Network lead.
- Measure
- Share of critical assets in enforced segments.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
Illumio Segmentation
Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.
Zero Trust Endpoint Firewall
Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.
Recent stories it addresses
541 stories in total- 15 Oct 2026Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
Linux kernel vulnerability PwnEscape allows guest VMs to read host memory.
- 15 Oct 2026Anthropic Warns Small AI Models Could Power Self-Spreading AI Worms
Anthropic warns small AI models could enable self-spreading AI worms targeting connected devices.
- 15 Oct 2026Eclipse Foundation Eclipse Milo
Eclipse Milo versions >=0.6.0 and <=1.1.4 have vulnerabilities allowing data deletion, credential recovery, and denial
- 15 Oct 2026Thermo Fisher Torrent Suite Software
Thermo Fisher Torrent Suite Software vulnerable to path traversal.
- 15 Oct 2026CISA Malcolm
CISA Malcolm suffers from six vulnerabilities, including authentication bypass and SSRF.
- 15 Oct 2026J4Care dcm4che
Multiple critical vulnerabilities found in J4Care dcm4chee-arc-light medical imaging software.
- 14 Oct 2026AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds
AI agents navigated unfamiliar OT systems and moved physical equipment in minutes, Booz Allen finds.
- 14 Oct 2026Zero Trust in Practice: Moving Beyond the Buzzword
Article clarifies Zero Trust principles and practical implementation, emphasizing identity as the foundational element.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.