green_heart:Teleport :fire::fire::fire::fire::fire: - Teleport Unified Access Plane enables engineers to quickly access any computing resource anywhere.
GoGNU Affero General Public License v3.0active
Kubernetes Security and Compliance
Search all Kubernetes projects →18 projectsTools and Libraries › Security and Compliance
- 45%active
- 11%steady
- 33%slowing
- 11%dormant
Security and Compliance
green_heart:Falco :fire::fire::fire::fire::fire: - Falco is a behavioral activity monitor designed to detect anomalous activity in your applications. You can use Falco to monitor run-time security of your Kubernetes applications and internal components.
C++Apache License 2.0active
green_heart:kube-bench :fire::fire::fire::fire::fire: - kube-bench is a Go application that checks whether Kubernetes is deployed securely by running the checks documented in the CIS Kubernetes Benchmark.
GoApache License 2.0active
green_heart:Kyverno :fire::fire::fire::fire: - Kyverno is a policy engine designed for Kubernetes. It can validate, mutate, and generate configurations using admission controls and background scans.
GoApache License 2.0active
green_heart:Datree :fire::fire::fire::fire::fire: - Datree is a CLI tool that supports Kubernetes admins in their roles by preventing developers from making errors in Kubernetes configurations that can cause clusters to fail in production.
GoApache License 2.0slowingarchived
green_heart:Deepfence ThreatMapper :fire::fire::fire: - Apache v2, powerful runtime vulnerability scanner for kubernetes, virtual machines and serverless.
TypeScriptApache License 2.0active
green_heart:kube-hunter :fire::fire::fire::fire::fire: - kube-hunter hunts for security weaknesses in Kubernetes clusters.
PythonApache License 2.0slowing
green_heart:Gatekeeper :fire::fire::fire::fire::fire: - Policy controller for Kubernetes
GoApache License 2.0active
green_heart:KubeLinter :fire::fire::fire::fire: - KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.
GoApache License 2.0active
green_heart:KubiScan :fire::fire::fire: - A tool for scanning Kubernetes cluster for risky permissions in Kubernetes's Role-based access control (RBAC) authorization model.
PythonGNU General Public License v3.0slowing
green_heart:rakkess :fire::fire::fire: - kubectl plugin to show an access matrix for server resources
GoApache License 2.0dormant
green_heart:Permission manager :fire::fire::fire: - Permission Manager is an application developed by SIGHUP that enables a super-easy and user-friendly RBAC management for Kubernetes.
TypeScriptBSD 3-Clause "New" or "Revised" Licenseslowing
green_heart:Kubesploit :fire::fire::fire: - Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent dedicated for containerized environments written in Golang and built on top of Merlin project by Russel Van Tuyl (@Ne0nd0g).
GoGNU General Public License v3.0slowing
green_heart:k-rail :fire::fire: - k-rail is a workload policy enforcement tool for Kubernetes. It can help you secure a multi tenant cluster with minimal disruption and maximum velocity.
GoApache License 2.0dormantarchived
green_heart:Konstraint :fire::fire: - Konstraint is a CLI tool to assist with the creation and management of constraints when using Gatekeeper.
GoMIT Licensesteady
green_heart:Intents operator :fire::fire: - Manage network policies, Istio Authorization Policies, and Kafka ACLs in a Kubernetes cluster with ease.
GoApache License 2.0slowing
green_heart:Netchecks :fire: - Set of tools for testing network conditions and asserting that they are as expected.
PythonApache License 2.0active
green_heart:Rönd :fire: - Rönd is an open-source lightweight Kubernetes sidecar container that helps you protect your APIs with simple security policies. It also natively allows you to build your RBAC/ABAC solution.
GoApache License 2.0steady