accuknox / discovery-engineLinks
Discover least permissive security posture, Network Microsegmentation, and Application behaviour based on visibility/observability data emitted from policy engines..
☆34Updated 8 months ago
Alternatives and similar repositories for discovery-engine
Users that are interested in discovery-engine are comparing it to the libraries listed below
Sorting:
- Intent driven security automation framework☆27Updated 5 months ago
- Community curated list of System and Network policy templates for the KubeArmor and Cilium☆50Updated last month
- Falco plugins registry☆113Updated this week
- A tool for in-depth analysis of container checkpoints☆140Updated 2 weeks ago
- Runtime detection and response for malicious events in Kubernetes workloads☆46Updated last year
- Administrative tooling for Falco☆121Updated this week
- KubeArmor cli tool aka kArmor☆43Updated this week
- Find your favorite eBee☆74Updated 10 months ago
- Generate a variety of suspect actions that are detected by Falco rulesets☆115Updated 8 months ago
- AI-generated remediations for Falco audit events☆72Updated 2 years ago
- Response Engine for managing threats in your Kubernetes☆189Updated 2 months ago
- Tutorials about Cilium and SPIRE integration☆30Updated 4 years ago
- Tools for understanding, measuring, and applying network policies effectively in kubernetes☆121Updated last year
- agent for handling seccomp descriptors for container runtimes☆47Updated 2 years ago
- Artifact Ratification Framework (CNCF Sandbox)☆283Updated last week
- The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.☆130Updated last week
- Anchore Kubernetes Inventory can poll Kubernetes Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-u…☆68Updated this week
- A Kubernetes CSI plugin to automatically mount SPIFFE certificates to Pods using ephemeral volumes☆85Updated this week
- This projects contains pre-made policies for Kubernetes Validating Admission Policies. This policy library is based on Kubescape controls…☆78Updated 3 months ago
- kubectl plugin for signing Kubernetes manifest YAML files with sigstore☆85Updated last week
- A place for policy work group related proposals and prototypes.☆65Updated 8 months ago
- Container Storage Interface components for SPIFFE☆63Updated 2 weeks ago
- sigstore the hard way!☆118Updated 6 months ago
- The Falco Project Community☆55Updated last week
- Hydrophone is a lightweight Kubernetes conformance tests runner☆113Updated this week
- Operator to deploy confidential containers runtime☆152Updated last week
- Ingress node firewall implements Kubernetes operator to provision stateless ingress node level firewall rules, stateless ingress node fir…☆71Updated last month
- Goby CLI eBPF Project Generator☆34Updated last year
- Scans SBOMs for vulnerabilities with Grype☆85Updated last week
- Manage admission policies in your Kubernetes cluster with ease☆222Updated this week