Security

Sidecar Process

A long-running helper process a product starts beside its main daemon to provide a specific function, such as an embedded database, metrics exporter or cluster coordinator. Sidecars often open their own network listeners and carry their own vulnerabilities, so they belong in the product's attack-surface inventory.

Deep dive

Learn Article

How to Find and Fence the Helper Ports a Product Opens Beside Its Main Service

Bundled sidecars and helper daemons open listeners the install guide never mentioned, sometimes on random ports. A six-step process to inventory them, pin them, decide their audience and enforce it.

intermediate 6 min read

Back to glossary