📄️ kube-score
Analyze Kubernetes manifests for security, reliability, and performance issues using kube-score.
📄️ Kubescape
Kubescape is a Kubernetes security scanner that assesses clusters, manifests, and Helm charts against security frameworks and misconfigurations.
📄️ Polaris
Polaris is a Kubernetes configuration validation tool that checks workloads against best practices and highlights potential security and stability issues.
📄️ Conftest
Conftest helps you write tests against structured configuration data using Open Policy Agent (OPA) policies.
📄️ Terrascan
Terrascan is a static code analyzer that detects compliance and security violations across Infrastructure as Code (IaC) configurations like Terraform, Kubernetes, and more.
📄️ kube-linter
KubeLinter is a static analysis tool that checks Kubernetes YAML manifests and Helm charts for security issues and best practices.
📄️ Checkov
Checkov is a static analysis security tool for Terraform, Kubernetes, Docker, and Helm infrastructure-as-code files.
📄️ cnspec
cnspec is a cloud-native security scanner from Mondoo that assesses Kubernetes clusters, containers, and infrastructure against security policies and compliance frameworks.
📄️ kube-scan
kube-scan is a Kubernetes risk assessment tool that calculates risk scores for workloads based on their security configurations and potential attack impact.
📄️ kubectl-kubesec
kubectl-kubesec is a kubectl plugin that scans Kubernetes resources using kubesec.io to identify security risks and provide hardening recommendations.
📄️ Steampipe for Kubernetes
Steampipe enables SQL-based querying of Kubernetes resources and compliance scanning using the steampipe-kubernetes plugin and compliance mod.