Stay Ahead of Kubernetes Security: ARMO Platform Now Supports CIS Kubernetes Benchmark v1.10

Feb 24, 2025

Yossi Ben Naim
VP of Product Management

Kubernetes security is an evolving challenge, and staying compliant with industry best practices is crucial. That’s why we’re excited to announce that ARMO now supports the latest CIS Kubernetes Benchmark v1.10!

“This is another important step in our commitment to delivering unified, open security that reduces exposures, strengthens defenses, and streamlines security operations.” – Corey Thomas, CEO at Rapid7

What’s New in CIS Kubernetes Benchmark v1.10?

The CIS Kubernetes Benchmark v1.10.0 introduces several key updates to enhance security and compliance for Kubernetes environments. Version 1.10 introduces:
✅ Updated security best practices to address evolving threats.
✅ Enhanced checks for Kubernetes components, ensuring better coverage.
✅ Improvements in control descriptions to reduce misinterpretations.

Notable changes include:

Automated Assessment Content (AAC): Integration of AAC and support for Kubernetes versions 1.30 and 1.31, facilitating streamlined compliance checks.

Updated Recommendations: The audit and remediation procedure have been updated with 27 recommendations, ensuring they align with current best practices.
Revised Cryptographic Ciphers: The list of secure and insecure ciphers has been revised to enforce stronger cryptographic standards
Security Context Variable Verbiage has been revised to support ‘securityContext’ variables, promoting better security configurations.

These updates aim to strengthen the security posture of Kubernetes deployments by providing clearer guidance and improved assessment capabilities.

How ARMO Platform Helps You Stay Compliant

With this upgrade, ARMO Platform users can:
🔹 Run compliance scans with CIS Kubernetes v1.10 to assess their clusters.
🔹 Identify gaps between the previous benchmark and the new requirements.
🔹 Get actionable remediation steps to fix misconfigurations instantly.

What’s Next?

You can start using the updated benchmark today by running a compliance scan in the ARMO platform. If you have any questions, our team is here to help!💡 Want to see the new CIS benchmark in action? Click here.