Kubernetes Vulnerability Scanner {Avoid the CVE Shock}
The open source Kubernetes security platform:
✔️ Container & Image scanning
✔️ Vulnerability management
✔️ Risk analysis and compliance
✔️ Misconfiguration detection
✔️ End-to-end CI/CD security
And more…
Visit GitHub +80K
Downloads
+50K
Users
Seamless Kubernetes & Container Security()
- Continuously scan container images and registries for vulnerabilities;
- Easily identify, prioritize, and filter which vulnerabilities to patch first;
- Continuous Kubernetes security tightening and attack surface reduction;
Detect and Prevent Misconfigurations()
- Scan code repositories, manifest files (YAML, Helm), clusters, worker nodes, and API servers;
- Define and enforce Kubernetes security best practices against multiple frameworks as NSA-CISA, CIS, MITRE, K8s Best Practices, or create your own;
- Identify and prevent configurations drifts continuously, from CI/CD to Production;
- Get instant K8s risk score, see history of past scans and learn risk trends overtime;
Run within your CI/CD()
- Embed security into any stage of your SDLC – from configuration to production
- Simple integration to your favorite pipeline tools including Jenkins, CircleCI, Gitlab, Github workflows, Prometheus, Lens, Slack, and more;
- Supports multi-cloud K8s deployments like EKS, GKE, and AKS
- Easy to use CLI interface and flexible output formats;
- API based with read-only privileges;
Kubernetes RBAC made easy()
- Visual RBAC configuration graphs, easy-to-use and understand;
- Built-in queries to reveal the most important RBAC insights;
- Customized RBAC investigation tool;
Trusted by
50,000
[Users]
From
914
[companies]
Gil Gershonovich
R&D Group Lead
at Optimove
Walter Lee
Senior Software Engineer
at Googleat Wells Fargo
Sagi Kruvi
Devops Team Lead
at Googleat Cognyte
Alan Clucas
Multi-talented Software Engineer with Ops and Devops experience and even some soft skills
at World Programming
Erez Kirson
senior solution architect
at Redhat
Lars Larsson
PhD, Senior Cloud Architect, and DevOps Expert Engineer
at Elastisys
Tom Bosworth
Security Engineer
at 9Spokes
Tim Collins
Senior DevOps Engineer
at Sendible
