A method, comprising: detecting a new application container; deploying a security entity to the application container into a path of application layer network traffic in a container environment for securing all network traffic types, wherein the security entity is transparently inserted into the path of all application layer network traffic for ingress, egress, and east-west flows without modification of the flows and without using a sidecar container or IP tables by performing the following: generating a new network namespace associated with the security entity on a node in the container environment; and moving an interface of a bridge of the node to the new network namespace associated with the security entity, creating a new pair of interfaces (214a, 214b) between the new network namespace and a network namespace associated with the application container, and inserting the security entity into the path of all application layer network traffic using the new pair of interfaces (214a, 214b) between the new network namespace associated with the security entity and the network namespace associated with the application container to facilitate performing inline security in the container environment to detect and prevent threats traveling between namespace boundaries; monitoring all traffic to and from the application container using the security entity to enforce a policy; and sending traffic log data from the security entity to a security management entity, wherein the traffic log data is sent to the security management entity periodically and prior to the application container being destroyed. detecting a new application container; deploying a security entity to the application container into a path of application layer network traffic in a container environment for securing all network traffic types, wherein the security entity is transparently inserted into the path of all application layer network traffic for ingress, egress, and east-west flows without modification of the flows and without using a sidecar container or IP tables by performing the following: generating a new network namespace associated with the security entity on a node in the container environment; and moving an interface of a bridge of the node to the new network namespace associated with the security entity, creating a new pair of interfaces (214a, 214b) between the new network namespace and a network namespace associated with the application container, and inserting the security entity into the path of all application layer network traffic using the new pair of interfaces (214a, 214b) between the new network namespace associated with the security entity and the network namespace associated with the application container to facilitate performing inline security in the container environment to detect and prevent threats traveling between namespace boundaries; generating a new network namespace associated with the security entity on a node in the container environment; and moving an interface of a bridge of the node to the new network namespace associated with the security entity, creating a new pair of interfaces (214a, 214b) between the new network namespace and a network namespace associated with the application container, and inserting the security entity into the path of all application layer network traffic using the new pair of interfaces (214a, 214b) between the new network namespace associated with the security entity and the network namespace associated with the application container to facilitate performing inline security in the container environment to detect and prevent threats traveling between namespace boundaries; monitoring all traffic to and from the application container using the security entity to enforce a policy; and sending traffic log data from the security entity to a security management entity, wherein the traffic log data is sent to the security management entity periodically and prior to the application container being destroyed.