
ingress-nginx
Ingress NGINX Controller for Kubernetes

Ingress NGINX Controller for Kubernetes

Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in your…

Security risk analysis for Kubernetes resources

A Blazing fast Security Auditing tool for Kubernetes

Automated security checker for Kubernetes clusters with Istio service mesh, enforcing best practices via OPA policies and generating remediation…

Proof-of-concept exploit for Kubernetes service-account token disclosure via hostPath mounts; includes vulnerable pod YAML and Python token-theft…

Validation of best practices in your Kubernetes clusters

Cloud-native Kubernetes cluster inspection tool that detects application misconfigurations, unhealthy components, and node problems using custom OPA,…

CVE-2020-8554: Man in the middle using LoadBalancer or ExternalIPs

A tool to scan Kubernetes cluster for risky permissions

[EXPERIMENTAL] Kubernetes Operator for Image Assurance

Kubernetes-native security operator that automates vulnerability scanning, configuration auditing, secret detection, RBAC analysis, and compliance…

Kubernetes Security Training Platform - focusing on security mitigation

Kubolt utility for scanning public kubernetes clusters

Hands-on capture-the-flag lab for the OWASP Kubernetes Top 10 (2025). Exploit 11 real-world cluster weaknesses, capture flags, then apply fixes and…

Exploit PoC and vulnerable admission webhook for CVE-2026-5556, demonstrating Kubernetes admission controller bypass via case-sensitive pod name…

Proof-of-concept exploit for CVE-2020-8554, demonstrating Kubernetes service externalIP manipulation to achieve man-in-the-middle attacks on cluster…

Hunt for security weaknesses in Kubernetes clusters