
kubescape
Open-source Kubernetes security platform scanning clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance against NSA,…

Open-source Kubernetes security platform scanning clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance against NSA,…

A vulnerability scanner for container images and filesystems

Intentionally vulnerable Kubernetes cluster environment for hands-on security training. Includes 22+ scenarios covering container escape, RBAC…

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

getshell test

Hunt for security weaknesses in Kubernetes clusters

Declarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel…

Isolate your big brother apps https://secure-system.gitlab.io/Insular/

Real-time cloud-native runtime security agent for Linux that monitors syscalls and container/Kubernetes metadata to detect anomalous behavior and…

C-based PoC for CVE-2019-5736

k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.

📦 Make security testing of K8s, Docker, and Containerd easier.

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…

Sandboxes containers via a userspace application kernel that intercepts system calls, limits host kernel access, and integrates with…

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Container escape proof-of-concept exploits for CVE-2026-80521 and CVE-2026-52910, with a disposable QEMU/Ubuntu VM harness for safe PoC execution.

Peirates - Kubernetes Penetration Testing tool