Container & Kubernetes Security
Security tools specifically designed for container environments and Kubernetes clusters.
Harbor
An open source trusted cloud native registry project that stores, signs, and scans content.
kube-bench
A tool to ensure Kubernetes deployments adhere to industry-standard security best practices as outlined in the CIS Kubernetes Benchmark.
Kubescape
A security platform for Kubernetes that identifies and remediates misconfigurations, vulnerabilities, and compliance issues.
Cosign
Code signing and transparency for containers and binaries
Kubernetes Goat
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground
Hadolint
Dockerfile linter, validate inline bash, written in Haskell
KubeArmor
Runtime Security Enforcement System for Kubernetes environments, leveraging Linux Security Modules for workload hardening and policy enforcement.
Triton DataCenter
A cloud management platform with first class support for containers.
Anchore Kubernetes Inventory
A tool that polls Kubernetes Cluster API(s) to provide visibility into containers and images in use within Kubernetes clusters.
Kubewatch
A tool for monitoring and notifying teams about resource changes in Kubernetes clusters.
Microsoft Container Security Toolkit
A toolkit designed to enhance the security of containerized applications throughout their lifecycle, addressing vulnerabilities, misconfigurations, and runtime security challenges.
semgr8s
Semgrep-based Policy Controller for Kubernetes