CloudPassage, maker of a workload visibility and access management tool, is adding security benchmarks for Docker containers to its service.

The benchmarks from the Center for Internet Security will expand the service from traditional virtual infrastructure to containerized apps, a move that CloudPassage initiated after hearing customers clamor for Docker support, says CloudPassage CTO Amrit Williams.

"This is probably the third largest technical change that's occurred in our lifetime," Williams says of the shift to cloud enabled in part by containers (along with, we presume, Internet Protocol and seedless watermelons). "The speed and velocity that these things spin up and spin down with requires changes to how you approach security."

[UPDATE: Williams clarifies his position on seedless watermelons in comments section below.]

CloudPassage's core product, Halo, deploys agent software on every server or Docker instance, which checks the instance's configuration against golden image benchmarks, audits and reports activity, and can be used to manage access control and workload firewalls.

Founded in 2009, CloudPassage added a $25.5 Series C funding round in February of last year, bringing the company's total backing to $53 million. Customers, whom we've been asked not to name, include a popular video streaming subscription service, a widely-used CRM software company, and the makers of a well-known photo editing program.