Tools
kyverno
kyverno/kyverno
A Kubernetes-native policy engine that uses policy-as-code to validate, mutate, generate, and clean up resources, and to verify container image signatures.
Topics
Related projects
cloudformation-guard1.4kAWS CloudFormation Guard is a policy-as-code CLI and DSL for validating CloudFormation templates, Terraform plans and Kubernetes configurations against custom rules.
cilium25.8kAn eBPF-based networking, security, and observability platform for Kubernetes, providing CNI networking, load balancing, and identity-aware network policies.
wazuh17.7kWazuh is an open-source security platform combining XDR and SIEM. Endpoint agents and a management server collect and analyze logs to deliver intrusion detection, file integrity monitoring, vulnerability detection, configuration assessment and incident response across on-premises and cloud workloads.
prowler15.2kProwler is an open-source cloud security and compliance platform with thousands of built-in checks and compliance frameworks. It scans AWS, Azure, GCP, Kubernetes and other environments, offering a CLI, a self-hosted local server and AI-assisted capabilities.
falco9.6kFalco is a CNCF cloud-native runtime security tool that monitors kernel and container events against custom rules to detect and alert on threats in real time.- tetragon5.1kTetragon is Cilium's eBPF-based security observability and runtime enforcement component. It captures process, syscall and I/O events in real time and applies Kubernetes-aware detection and enforcement policies.