Container Isolation Scores¶
How isolated is the container you just docker run? This directory grades 252 of the most-pulled public images as they ship, run with plain docker run <image> defaults, no hardening flags, on IronClaw's seven-dimension containment scale (0-100). Every score comes from ironctl scan, a credential-free audit you can run on your own containers in ten seconds.
The headline: the average default image scores 52/100. Grade distribution: 69×C, 183×D. Almost nothing you pull is isolated out of the box, it runs as root, keeps the full capability set, and has a writable root filesystem. The good news: every gap on these pages closes with a handful of docker run flags.
Scan your own container:
brew install ironsecco/ironclaw/ironclaw && ironctl scan my-container. See Scan any container.New: the Container Isolation Leaderboard ranks every image best-to-worst, with a Hall of Fame and a Worst-offenders cut. Each scorecard now carries a copy-paste shields.io badge you can embed in your repo.
Browse by category: ranked collection pages compare like with like, most secure databases, language runtimes, web servers, CI/CD, and more.
Every image, worst-isolated first¶
| Image | Score | Grade | Top gaps (default config) |
|---|---|---|---|
gitea/act_runner:0.2.11 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
actualbudget/actual-server:24.12.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
adguard/adguardhome:latest |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
aerospike/aerospike-server:7.2.0.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
grafana/alloy:latest |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
almalinux:9 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
alpine:3.21 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
amazoncorretto:21 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
amazonlinux:2023 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
continuumio/anaconda3:2024.10-1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
appwrite/appwrite:1.6.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
arangodb:3.12 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
archlinux:latest |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
mcr.microsoft.com/dotnet/aspnet:9.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
ghcr.io/advplyr/audiobookshelf:2.17.5 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
authelia/authelia:4.38 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
baserow/baserow:1.30.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
prom/blackbox-exporter:v0.25.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
oven/bun:1.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
busybox:1.37 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
caddy:2-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
gcr.io/cadvisor/cadvisor:v0.52.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
cassandra:5.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
centrifugo/centrifugo:v5.4.7 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
quay.io/ceph/ceph:v18.2.4 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
chromadb/chroma:0.5.23 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
chronograf:1.10 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
clickhouse:24.8 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
clojure:temurin-21-tools-deps |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
cockroachdb/cockroach:latest |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
concourse/concourse:7.12.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
hashicorp/consul:1.20 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
quay.io/cortexproject/cortex:v1.18.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
couchdb:3.4 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
crystallang/crystal:1.14.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
dart:3.6 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
lissy93/dashy:3.1.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
debian:12-slim |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
denoland/deno:2.1.4 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
dgraph/dgraph:v24.0.5 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
docker:27-dind |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
docker.dragonflydb.io/dragonflydb/dragonfly:latest |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
drone/drone:2 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
drupal:11-apache |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
lscr.io/linuxserver/duplicati:2.1.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
eclipse-mosquitto:2 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
eclipse-temurin:21-jre-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
elixir:1.18-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
envoyproxy/envoy:v1.32-latest |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
erlang:27-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
fedora:41 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
firebirdsql/firebird:5.0.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
flink:1.20 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
codeberg.org/forgejo/forgejo:9 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
freshrss/freshrss:1.24.3 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
gcc:14 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
ghost:5-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
gitea/gitea:1.22 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
gitlab/gitlab-ce:17.7.0-ce.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
gitlab/gitlab-runner:v17.7.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
gogs/gogs:0.13 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
golang:1.23-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
ghcr.io/graalvm/graalvm-community:21 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
gradle:8-jdk21 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
hasura/graphql-engine:v2.44.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
haskell:9.8 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
lscr.io/linuxserver/heimdall:2.6.3 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
ghcr.io/home-assistant/home-assistant:2024.12 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
ghcr.io/gethomepage/homepage:v0.10.9 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
httpd:2.4-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
ibmjava:8-jre |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
apacheignite/ignite:2.16.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
ghcr.io/immich-app/immich-server:v1.123.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
influxdb:2.7-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
jellyfin/jellyfin:10.10.3 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
joomla:5-apache |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
julia:1.11 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
jupyterhub/jupyterhub:5.2.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
rancher/k3s:v1.31.4-k3s1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
kapacitor:1.7 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
eqalpha/keydb:latest |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
opensuse/leap:15.6 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
localstack/localstack:4 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
nickblah/lua:5.4 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
axllent/mailpit:latest |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
manticoresearch/manticore:6.3.6 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
mariadb:11 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
matomo:5 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
maven:3.9-eclipse-temurin-21 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
mediawiki:1.43 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
getmeili/meilisearch:v1.11 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
metabase/metabase:v0.52.4 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
milvusdb/milvus:v2.5.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
minio/minio:latest |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
ghcr.io/mlflow/mlflow:v2.19.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
mongo:7 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
mongo-express:1.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
mono:6.12 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
mysql:8.4 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
nats:2.10-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
deluan/navidrome:0.54.3 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
neo4j:5 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
netdata/netdata:stable |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
nextcloud:30-apache |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
nginx:1.27-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
nginxproxy/nginx-proxy:1.6.4 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
jc21/nginx-proxy-manager:2.12.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
nimlang/nim:2.2.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
nocodb/nocodb:0.257.2 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
node:22-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
hashicorp/nomad:1.9 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
nsqio/nsq:v1.3.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
binwiederhier/ntfy:v2.11.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
ollama/ollama:0.5.4 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
openresty/openresty:alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
oraclelinux:9 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
orientdb:3.2.35 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
hashicorp/packer:1.11.2 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
ghcr.io/paperless-ngx/paperless-ngx:2.14.7 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
perl:5.40-slim |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
pgvector/pgvector:pg17 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
photon:5.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
php:8.4-apache |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
phpmyadmin:5.2 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
pihole/pihole:2024.07.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
postgis/postgis:17-3.5 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
postgres:17-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
grafana/promtail:3.3.2 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
pulumi/pulumi:3.144.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
pypy:3.10-slim |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
python:3.13-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
qdrant/qdrant:v1.12.4 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
questdb/questdb:8.2.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
rabbitmq:4-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
rancher/rancher:v2.10.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
rclone/rclone:1.68.2 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
redis:7-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
redis/redis-stack-server:7.4.0-v3 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
redmine:6 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
registry:2.8.3 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
restic/rest-server:0.13.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
rethinkdb:2.4 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
rockylinux:9 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
rocker/rstudio:4.4.2 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
ruby:3.4-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
rust:1.83-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
sbtscala/scala-sbt:eclipse-temurin-21.0.5_11_1.10.7_3.6.2 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
scylladb/scylla:6.2 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
chrislusf/seaweedfs:3.80 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
vaultwarden/server:1.32.7 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
snipe/snipe-it:v7.0.13 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
statsd/statsd:v0.10.2 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
storm:2.7.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
lscr.io/linuxserver/swag:4.1.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
swaggerapi/swagger-ui:latest |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
swift:6.0.3 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
matrixdotorg/synapse:v1.121.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
lscr.io/linuxserver/syncthing:1.28.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
tailscale/tailscale:v1.78.3 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
tarantool/tarantool:3.3.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
telegraf:1.33-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
tensorflow/tensorflow:2.18.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
hashicorp/terraform:1.10 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
pingcap/tidb:v8.5.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
timescale/timescaledb:2.17.2-pg17 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
tomcat:10.1-jre21-temurin |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
tomee:9.1.3-jre17 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
traefik:v3.2 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
typesense/typesense:27.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
ubuntu:24.04 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
unit:1.34.1-minimal |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
louislam/uptime-kuma:1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
valkey/valkey:8 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
hashicorp/vault:1.18 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
timberio/vector:0.43.0-alpine |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
victoriametrics/victoria-metrics:v1.107.0 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
wallabag/wallabag:2.6.10 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
semitechnologies/weaviate:1.28.1 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
lscr.io/linuxserver/wireguard:1.0.20210914 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
wordpress:6-php8.3-apache |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
yugabytedb/yugabyte:2.23.0.0-b710 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
zookeeper:3.9 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
azul/zulu-openjdk:21 |
48/100 | 🟠 D | Dropped capabilities, Non-root user (uid != 0), Network isolation / egress |
ghcr.io/actions/actions-runner:2.321.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
apache/activemq-artemis:2.38.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
adminer:4.8.1 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
apache/airflow:2.10.4 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
prom/alertmanager:v0.28.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
quay.io/argoproj/argocd:v2.13.2 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
quay.io/jupyter/base-notebook:latest |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
confluentinc/cp-kafka:7.8.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
dexidp/dex:v2.41.1 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
directus/directus:11.3.5 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
apache/druid:31.0.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
elasticsearch:8.16.1 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
emqx:5 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
fluent/fluentd:v1.17 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
grafana/grafana:11.4.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
graylog/graylog:6.1 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
groovy:4 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
haproxy:3.1-alpine |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
goharbor/harbor-core:v2.12.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
hazelcast/hazelcast:5.5.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
oryd/hydra:v2.2.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
jaegertracing/jaeger:2.1.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
jenkins/jenkins:lts |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
jetty:12-jre21 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
apache/kafka:3.9.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
quay.io/keycloak/keycloak:26.0.7 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
kibana:8.16.1 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
kong:3.8 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
logstash:8.16.1 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
grafana/loki:3.3.2 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
mailhog/mailhog:v1.0.1 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
mattermost/mattermost-team-edition:10.2 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
memcached:1.6-alpine |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
miniflux/miniflux:2.2.3 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
n8nio/n8n:1.71.3 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
sonatype/nexus3:3.75.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
nginxinc/nginx-unprivileged:1.27-alpine |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
apache/nifi:2.0.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
prom/node-exporter:v1.8.2 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
opensearchproject/opensearch:2 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
opensearchproject/opensearch-dashboards:2.18.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
outlinewiki/outline:0.82.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
percona:8.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
dpage/pgadmin4:8 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
ghcr.io/plankanban/planka:1.24.2 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
prom/prometheus:v3.1.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
apachepulsar/pulsar:3.3.2 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
prom/pushgateway:v1.10.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
redis/redisinsight:latest |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
redpandadata/redpanda:v24.2.11 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
payara/server-full:6.2024.12 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
solr:9 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
sonarqube:community |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
apache/spark:3.5.3 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
selenium/standalone-chrome:4.27.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
apache/superset:4.1.1 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
jetbrains/teamcity-server:2024.12 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
grafana/tempo:2.6.1 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
quay.io/thanos/thanos:v0.37.2 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
apache/tika:latest |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
ghcr.io/umami-software/umami:postgresql-v2.14.0 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
varnish:7.6-alpine |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
verdaccio/verdaccio:6 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
vernemq/vernemq:2.0.1 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
vespaengine/vespa:8.453.24 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
wekanteam/wekan:v7.72 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
requarks/wiki:2 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
apache/zeppelin:0.11.2 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
openzipkin/zipkin:3.4.4 |
63/100 | 🟡 C | Dropped capabilities, Network isolation / egress, Read-only root filesystem |
What the seven dimensions mean¶
Each image is graded on the same containment dimensions IronClaw's own sandbox benchmark checks, the properties that decide whether a container escape starts from a strong or a hopeless position:
- Non-root user (15 pts), does it drop host uid 0?
- Dropped capabilities (20 pts), is the Linux capability set minimized?
- Seccomp profile (15 pts), is the syscall surface filtered?
- Network isolation (15 pts), is egress cut (
network=none)? - Read-only root filesystem (10 pts), is the tamper surface removed?
- No docker.sock exposure (15 pts), is the host control socket kept out?
- No shared host namespaces (10 pts), are PID/IPC/net namespaces private?
Scores are fail-closed: any posture the scanner cannot determine is graded as insecure, never silently passed. See how scoring works and the full survey methodology.
These pages are generated from a reproducible survey, examples/isolation-survey/survey.sh scans every image, gen_scorecards.py renders the pages. Grades reflect the image's default configuration, not a limit of the image itself: every one can reach grade A with the right docker run flags.