7 docs tagged with "runtime-security"

Deepfence ThreatMapper is a runtime vulnerability scanner that discovers threats across Kubernetes clusters, VMs, containers, and serverless environments.

Falco is a runtime security tool for Kubernetes that detects abnormal behavior and threats based on system call monitoring and security rules.

kubectl-dig provides deep visibility into Kubernetes cluster activity using eBPF-based tracing, enabling real-time analysis of system calls and network traffic.

How to configure Kubernetes audit logging to record API server activity for security monitoring, incident detection, and compliance requirements.

A practical Kubernetes security checklist organized by the six CKS domains: RBAC, network policies, Pod Security, secrets, supply chain, and runtime defense.

How to apply noexec, nosuid, and nodev bind mount options to Kubernetes volume mounts in v1.37 to prevent binary execution from writable volumes.

Trivy Operator provides Kubernetes-native security scanning by automatically scanning workloads for vulnerabilities, misconfigurations, secrets, and RBAC issues.