Kubescape
An open source tool that scans clusters, manifests and images against security frameworks such as the NSA and CISA hardening guide, MITRE ATT&CK and the CIS Benchmark.
In more detail
Kubescape reports each control as passed or failed with a risk score, and can run in CI or inside the cluster on a schedule. It is a CNCF project. Its reports are evidence for compliance reviews, alongside kube-bench for the CIS checks.
Related terms
- kube-bench — An open-source tool that checks a Kubernetes node against the CIS Kubernetes Benchmark and reports pass or fail for each item.
- CIS Benchmarks — Free, consensus-built configuration guides from the Center for Internet Security that list recommended secure settings for one specific product.
Taught in
- Which Benchmark, And Who Checked It? Compliance And Frameworks — Kubernetes and Cloud Native Security Associate (KCSA) Exam Prep