Tools
stackrox
stackrox/stackrox
StackRox is a Kubernetes security platform that analyzes container risk, delivers runtime alerts, and recommends hardening actions across the container lifecycle.
Topics
Related projects
falco9.6kFalco is a CNCF cloud-native runtime security tool that monitors kernel and container events against custom rules to detect and alert on threats in real time.
cilium25.8kAn eBPF-based networking, security, and observability platform for Kubernetes, providing CNI networking, load balancing, and identity-aware network policies.
kata-containers9.1kA container runtime that runs workloads in lightweight virtual machines, combining the feel of containers with VM-level isolation and security.
gatekeeper4.3kAn OPA-based Kubernetes policy controller that validates and mutates resources at admission time through constraint templates and CRDs, enforcing cluster-wide security and compliance rules.
SecretScanner3.4kSecretScanner is a standalone tool that scans container images and host filesystems for unprotected secrets, matching roughly 140 secret types and reporting discovered keys, passwords, and tokens as JSON.
dockle3.3kDockle is a container image linter that audits Docker images against CIS benchmarks and best practices, reporting FATAL, WARN, and INFO findings with remediation guidance for secure image builds.