> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rad.security/llms.txt
> Use this file to discover all available pages before exploring further.

# Runtime Security

> RAD Security's runtime sensors for comprehensive application and infrastructure monitoring

RAD Security's runtime sensors provide deep visibility into your running applications and infrastructure, offering ground truth for accurate threat detection and comprehensive security coverage.

## What are Runtime Sensors?

Runtime sensors are specialized monitoring agents that collect real-time data from your running applications, containers, and infrastructure. Unlike traditional security tools that rely on logs and network traffic, runtime sensors provide direct visibility into system behavior, process execution, and application interactions.

### Key Capabilities

* **Application Monitoring** - Security events and anomalies in running applications
* **Container Security** - Containerized workloads and orchestration platforms
* **Process Monitoring** - Process execution and system calls for threat detection
* **File System Monitoring** - File system changes and access patterns

## Ground Truth for Security

### Why Runtime Sensors Matter

Runtime sensors provide the "ground truth" for security analysis by:

* **Direct Observation** - Monitor actual system behavior, not just logs or network traffic
* **Context Awareness** - Understand the full context of security events and user actions
* **Real-Time Detection** - Identify threats as they happen, not after the fact
* **Behavioral Analysis** - Detect anomalies based on actual system behavior patterns

### Data Collection

<AccordionGroup>
  <Accordion title="System Calls">
    Monitor system calls to detect malicious behavior, privilege escalation attempts, and unauthorized access patterns.
  </Accordion>

  <Accordion title="Network Connections">
    Track network connections, data transfers, and communication patterns between applications and services.
  </Accordion>

  <Accordion title="File Access">
    Monitor file system access, modifications, and creation patterns to detect data exfiltration or malware installation.
  </Accordion>

  <Accordion title="Process Behavior">
    Analyze process creation, termination, and interaction patterns to identify malicious or suspicious activities.
  </Accordion>
</AccordionGroup>

## Deployment Options

### Installation Methods

* **Kubernetes Deployment** - Deploy as DaemonSets in Kubernetes clusters
* **Cloud Integration** - Integrate with cloud provider security services
* **Container Runtime** - Monitor container runtimes and orchestration platforms
* **Server Deployment** - Deploy on physical and virtual servers

## Security Benefits

### Comprehensive Coverage

Runtime sensors provide security benefits that traditional tools cannot match:

* **Zero-Day Detection** - Identify unknown threats based on behavioral patterns
* **Lateral Movement Detection** - Track attacker movement across your infrastructure
* **Data Exfiltration Prevention** - Monitor and prevent unauthorized data access
* **Compliance Monitoring** - Ensure adherence to security policies and regulations

### Integration with RAD Platform

<CardGroup cols={2}>
  <Card title="AI Analysis" icon="brain" href="/rad-security/getting-started/ai-workers">
    Runtime data feeds RAD's AI for intelligent threat detection
  </Card>

  <Card title="Automated Response" icon="bolt" href="/rad-security/platform/workspace">
    Trigger automated responses based on runtime security events
  </Card>

  <Card title="Unified Dashboard" icon="chart-line" href="/rad-security/platform/workspace">
    View runtime security data in the unified platform dashboard
  </Card>

  <Card title="RADBot Integration" icon="comments" href="/rad-security/getting-started/radbot">
    Query runtime security data through RADBot for expert analysis
  </Card>
</CardGroup>

## Getting Started

<CardGroup cols={2}>
  <Card title="Quick Setup" icon="rocket" href="/rad-security/getting-started/quickstart">
    Deploy runtime sensors with our AI-powered onboarding
  </Card>

  <Card title="Platform Overview" icon="chart-line" href="/rad-security/platform/workspace">
    Learn how runtime sensors integrate with the RAD platform
  </Card>
</CardGroup>

<Note>
  **Runtime sensors are essential for comprehensive security coverage.** They provide the ground truth data that enables RAD's AI to make accurate security decisions and detect threats that traditional tools miss.
</Note>