accuknox / discovery-engineLinks
Discover least permissive security posture, Network Microsegmentation, and Application behaviour based on visibility/observability data emitted from policy engines..
☆34Updated 8 months ago
Alternatives and similar repositories for discovery-engine
Users that are interested in discovery-engine are comparing it to the libraries listed below
Sorting:
- Community curated list of System and Network policy templates for the KubeArmor and Cilium☆50Updated 2 weeks ago
- Intent driven security automation framework☆26Updated 5 months ago
- Falco plugins registry☆112Updated this week
- Runtime detection and response for malicious events in Kubernetes workloads☆46Updated last year
- Generate a variety of suspect actions that are detected by Falco rulesets☆114Updated 7 months ago
- Find your favorite eBee☆74Updated 9 months ago
- Anchore Kubernetes Inventory can poll Kubernetes Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-u…☆67Updated this week
- A tool for in-depth analysis of container checkpoints☆136Updated this week
- KubeArmor cli tool aka kArmor☆43Updated last week
- Response Engine for managing threats in your Kubernetes☆189Updated 2 months ago
- A place for policy work group related proposals and prototypes.☆65Updated 8 months ago
- Tools for understanding, measuring, and applying network policies effectively in kubernetes☆121Updated last year
- Administrative tooling for Falco☆121Updated last week
- Kyverno for any JSON!☆88Updated last year
- Manage admission policies in your Kubernetes cluster with ease☆220Updated this week
- AI-generated remediations for Falco audit events☆72Updated 2 years ago
- A Kubernetes CSI plugin to automatically mount SPIFFE certificates to Pods using ephemeral volumes☆85Updated last week
- The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.☆129Updated this week
- BadRobot - Operator Security Audit Tool☆223Updated last month
- Automatically register and generate AWS, GCP & Azure IAM roles, X.509 certificates and username/password pairs for Kubernetes pods using …☆66Updated 7 months ago
- Scans SBOMs for vulnerabilities with Grype☆85Updated last week
- Prometheus Metrics Exporter for Falco output events☆121Updated 9 months ago
- 🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their sig…☆79Updated last month
- kubectl plugin for signing Kubernetes manifest YAML files with sigstore☆85Updated this week
- sigstore the hard way!☆116Updated 5 months ago
- Notice: Postee is no longer under active development or maintenance.☆207Updated 4 months ago
- A standalone exporter for vulnerability reports and other CRs created by Trivy Operator (formerly Starboard).☆62Updated last week
- Goby CLI eBPF Project Generator☆34Updated 11 months ago
- Threat-informed defense for cloudnative: Reference Implementation of a so-called Honeycluster - The detection capabilities can also be us…☆55Updated last month
- Tutorials about Cilium and SPIRE integration☆30Updated 4 years ago