Tools
KubeArmor
kubearmor/KubeArmor
A cloud-native runtime security enforcement system that uses AppArmor, SELinux or BPF-LSM to restrict process, file and network behavior of pods, containers and nodes.
Topics
Related projects
cilium25.8kAn eBPF-based networking, security, and observability platform for Kubernetes, providing CNI networking, load balancing, and identity-aware network policies.
falco9.6kFalco is a CNCF cloud-native runtime security tool that monitors kernel and container events against custom rules to detect and alert on threats in real time.- tetragon5.1kTetragon is Cilium's eBPF-based security observability and runtime enforcement component. It captures process, syscall and I/O events in real time and applies Kubernetes-aware detection and enforcement policies.
tracee4.7kTracee is an open-source Linux runtime security and forensics tool from Aqua Security. Using eBPF, it collects system events and detects suspicious behavior, with Docker and Kubernetes deployment for runtime threat detection.
cerbos4.6kAn open-source authorization platform for defining fine-grained RBAC and ABAC policies in YAML and evaluating them through a self-hosted policy decision point.
gatekeeper4.3kAn OPA-based Kubernetes policy controller that validates and mutates resources at admission time through constraint templates and CRDs, enforcing cluster-wide security and compliance rules.