quay/container-security-operator

Discover vulnerabilities and container image misconfiguration in production environments.

Scans SBOMs for vulnerabilities with Grype

Use Snyk to find and fix vulnerabilities in your Kubernetes workloads

Kubernetes-native security toolkit

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

Vulnerability Static Analysis for Containers

Kubernetes security assessment CLI: RBAC, pod-escape, and privilege-escalation path analysis. Cloudsplaining for Kubernetes.

Anchore Kubernetes Inventory can poll Kubernetes Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-use

Drop a single binary into a compromised Kubernetes pod and instantly map every realistic attack path to cluster-admin, node escape, secret theft, and cloud IAM takeover.