tetragon
cilium/tetragoneBPF-based Security Observability and Runtime Enforcement
cloud-securitycontainer-securitydefensive-tools+1
4.9k1 day ago
cilium/tetragoneBPF-based Security Observability and Runtime Enforcement
kubescape/kubescapeOpen-source Kubernetes security platform scanning clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance against NSA,…
madhuakula/kubernetes-goatIntentionally vulnerable Kubernetes cluster environment for hands-on security training. Includes 22+ scenarios covering container escape, RBAC…
kubearmor/kubearmorRuntime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF,…
cdk-team/cdk📦 Make security testing of K8s, Docker, and Containerd easier.
aquasecurity/trivy-operatorKubernetes-native security operator that automates vulnerability scanning, configuration auditing, secret detection, RBAC analysis, and compliance…
aquasecurity/trivy-actionRuns Trivy as GitHub action to scan your Docker container image for vulnerabilities
owasp/devsecopsguidelineThe OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.
securecodebox/securecodeboxKubernetes-native security scanning orchestrator that automates continuous vulnerability detection by integrating multiple open-source scanners into…
mozillazg/ptcpdumpeBPF-based packet analyzer that captures network traffic with automatic process, container, and Kubernetes pod metadata annotation, supporting…
vchinnipilli/kubestrikerA Blazing fast Security Auditing tool for Kubernetes
madhuakula/hacker-containerThe Swiss Army Container for Cloud Native Security. Container with all the list of useful tools/commands while hacking and securing Containers,…
lockc-project/lockcMaking containers more secure with eBPF and Linux Security Modules (LSM)
sysflow-telemetry/sysflowCloud-native system telemetry pipeline that collects, processes, and exports system call events into a compact object-relational format for…
kube-tarian/tarianeBPF-based runtime security agent for Kubernetes that detects unknown processes and file changes, enforces pre-registered constraints, and automates…
roxanne_ardary/securekitSecurekit is a protocol-agnostic security kernel that enforces zero-trust, sandboxed execution for AI tool use. It sits between any LLM or agent…
cyberhades/hardening-k8s-containersHands-on lab demonstrating Kubernetes container hardening by comparing default vs. security-enhanced deployments of a vulnerable note-taking…
