#1Tools for scanning, securing, and hardening Docker, Kubernetes, and containerized environments.
Kitploit recommended
quay/clairVulnerability Static Analysis for Containers
kubescape/kubescapeOpen-source Kubernetes security platform scanning clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance against NSA,…
kata-containers/kata-containersKata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel…
google/osv-scannerVulnerability scanner written in Go which uses the data provided by https://osv.dev
anchore/syftCLI tool and library for generating a Software Bill of Materials from container images and filesystems
bridgecrewio/checkovStatic analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…
kyverno/kyvernoEnforce security and compliance on Kubernetes clusters via admission controls, resource mutation, background scans, and container image signature…
falcosecurity/falcoReal-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…
kubeshark/kubesharkeBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via…
bunkerity/bunkerweb🛡️ Open-source and cloud-native Web Application Firewall (WAF)
aquasecurity/kube-benchChecks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
ed1s0nz/cyberstrikeaiThe system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation…
aipentest/cyberstrikeaiThe system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation…
leebaird/discoverCustom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload…
chaos-mesh/chaos-meshA Chaos Engineering Platform for Kubernetes.
chaosblade-io/chaosbladeAn easy to use and powerful chaos engineering experiment toolkit.（阿里巴巴开源的一款简单易用、功能强大的混沌实验注入工具）
containers/bubblewrapLow-level unprivileged sandboxing tool used by Flatpak and similar projects
sigstore/cosignCode signing and transparency for containers and binaries
