kubernetes-sigs/security-profiles-operator

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

🐊 Policy Controller for Kubernetes

Unified Policy as Code

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

Kyverno policies for security and best practices

Kubernetes-native security toolkit

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides recommendations to proactively improve security by hardening the environment.

Security risk analysis for Kubernetes resources