Kube-bench Kube-bench, from the Center for Internet Security (CIS), is an excellent tool that checks if your Kubernetes cluster and nodes meet CIS’s ...

audit2rbac takes a Kubernetes audit log and username as input, and generates RBAC role and binding objects that cover all the API requests ...

ORY Hydra is a hardened, OpenID Certified OAuth 2.0 Server and OpenID Connect Provider optimized for low-latency, high throughput, and low resource consumption. ORY Hydra is ...

A distributed systems and infrastructure simulator for attacking and debugging Kubernetes: simulator creates a Kubernetes cluster for you in your AWS account; runs ...

Security risk analysis for Kubernetes resources Live demo Visit Kubesec.io This uses ControlPlane’s hosted API at v2.kubesec.io/scan Download Kubesec Kubesec is available as ...

On Kubernetes clusters for development, it’s pretty common to have workloads that become forgotten by developers, holding resources thus potentially voiding new workloads ...

kubewatch is a Kubernetes watcher that currently publishes notification to available collaboration hubs/notification channels. Run it in your k8s cluster, and you will ...

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and ...

Usage in CI kube-score can run in your CI/CD environment and will exit with exit code 1 if a critical error has been found. ...

This is the Alertmanager bot for Prometheus that notifies you on alerts.Just configure the Alertmanager to send Webhooks to the bot and that’s it. Additionally you can ...