Skip to content
Q Product

Tap Into Your Egress Traffic with eBPF

Discover external dependencies, monitor egress traffic, and scan for sensitive data with an eBPF observer running on your hosts.

Qtap hero

Discover the Who, What, and Where for the External Traffic from Your Production Workloads

Egress Observability Enhances Operational Resilience

Support the Full Range of Egress Observability Use Cases

Egress Observability

Challenge

Operators lack visibility into which applications are making external requests and what the endpoints are, making it difficult to enforce security policy, manage access controls, or detect potentially malicious activities.

Qpoint Solution

Deploy Qtap on your application hosts to create a catalog of the sources and destinations for all egress traffic. This visibility serves as a baseline for platform teams to enforce security policies, manage access controls, and detect potentially malicious activities more effectively.

Challenge

Operators struggle to proactively identify egress-related performance or security issues in real-time. This leads to delayed responses and increased risk of system downtime or data breaches.

Qpoint Solution

Use Qtap to continuously monitor egress traffic and set up real-time alerts for anomalous behavior, to enable your team to swiftly detect and address issues, ensuring operational stability and enhancing the security posture by providing immediate notifications of potential threats or performance issues.

Challenge

Operators often lack the ability to track and record detailed information about egress traffic, making it difficult to investigate security incidents, ensure compliance, and maintain accountability for data flows.

Qpoint Solution

Use Qtap to maintain comprehensive audit logs for all egress traffic from your core applications. These logs provide detailed records of outbound requests and responses, ensuring traceability and accountability for security and compliance purposes.

Challenge

Operators lack visibility into which API tokens are being used by applications to access external systems. This can make it difficult to detect unauthorized use or potential breaches. Lack of effective API token management can also result in regulatory compliance violations.

Qpoint Solution

Use Qtap to identify and monitor the set of API tokens being used for external requests by applications, and to generate reports based on specific criteria such as "in use longer than 30 days".

Challenge

Organizations often lack visibility into how and where their sensitive data is being transmitted, making it challenging to ensure compliance with stringent data protection regulations like HIPAA, GDPR, and others.

Qpoint Solution

Use Qtap to monitor for PII in traffic flows, generate exfiltration maps, and search by PII type to determine which workloads are sending requests that contain specific types of sensitive information.

Operational Resilience

Challenge

Operators struggle to swiftly identify and address disruptions in third-party API traffic, which hampers their ability to minimize downtime and maintain operational continuity.

Qpoint Solution

Use Qtap to rapidly detect anomalies or issues in third-party API traffic to minimize downtime, enhance operational resilience, and maintain continuous service reliability across their production environments. 

Challenge

Operators lack real-time monitoring to detect when third-party API usage approaches prescribed limits, risking throttling and potential disruptions to production systems.

Qpoint Solution

Leverage Qtap to proactively monitor and alert when third-party API usage nears capacity limits, safeguarding against throttling and ensuring smooth operation of production systems.

Challenge

Developers often spend excessive time debugging production issues due to a lack of clear, actionable evidence, delaying effective resolution and impacting system performance.

Qpoint Solution

Deploy Qtap to help developers swiftly pinpoint and resolve production issues by making precise, actionable request level data available, boosting efficiency and system reliability.

Designed for Platform Teams and Operators

Leveraging eBPF technology, Qtap offers easy deployment and efficient out-of-band execution for unparalleled visibility into egress traffic flows.

Built on eBPF

Qtap leverages eBPF technology for real-time egress observability without a man-in-the-middle proxy.

Easy to Deploy

Install the Qtap eBPF agent on a few hosts to get started. Roll it out across your fleet at your own pace.

Out-of-Band Execution

Qtap inspects the request stream out-of-band to ensure that data analysis does not impact system performance. 

Extend Qtap with Out-of-Band Middleware

Qtap leverages the Qpoint middleware framework to enable customizable, out-of-band processing of egress traffic flows.

Flexible

Stack functions from our middleware catalog together for serial execution.

Flexible

Customizable

Write and deploy custom functions using any WASM-capable language.

Customizable

High Performance

Execute functions at near-native speed and with low latency for critical workloads.

High performance