External Vulnerability Handling

An external vulnerability assessment was conducted and detected several potential vulnerabilities in the Interaction Insights code. The following vulnerabilities have been assessed and resolved:

■

Excessive RBAC permissions – tightened RBAC and secret access policies

●

Least-privilege access

●

Secret access scoped to explicit per-app mappings

■

Insufficient network segmentation – tightened network segmentation for the stng-applications namespace

●

Pod-to-pod communication limited to required services

●

Egress restricted to approved external endpoints

●

Blocked unintended service ports

■

Insecure container implementation – container runtime security hardened across core devices

●

Pods such as the UI/Front end container now run as non-root with minimized capabilities and read-only root file systems where feasible