Alternatives and similar repositories for unguard:

Users that are interested in unguard are comparing it to the libraries listed below

• snyk-labs / kubernetes-goof
  Kubernetes Stranger Danger
  ☆60Updated last year
• falcosecurity / event-generator
  Generate a variety of suspect actions that are detected by Falco rulesets
  ☆98Updated this week
• bgeesaman / malicious-compliance
  Supporting code and demos for KubeCon EU 2023 talk "Malicious Compliance: Reflections on Trusting Container Image Scanners"
  ☆66Updated last year
• SDA-SE / cluster-image-scanner
  Discover vulnerabilities and container image misconfiguration in production environments.
  ☆54Updated last week
• falcosecurity / falco-talon
  Response Engine for managing threats in your Kubernetes
  ☆147Updated this week
• OWASP / KubeLight
  OWASP Kubernetes security and compliance tool [WIP]
  ☆105Updated last year
• aquasecurity / trivy-operator-lens-extension
  https://github.com/aquasecurity/trivy-operator
  ☆38Updated 2 years ago
• alcideio / iskan
  Kubernetes Native, Runtime Container Image Scanning
  ☆39Updated 2 years ago
• RichardoC / kube-audit-rest
  Kubernetes audit logging, when you don't control the control plane
  ☆67Updated this week
• openclarity / vmclarity
  VMClarity is a tool for agentless detection and management of Virtual Machine Software Bill Of Materials (SBOM) and vulnerabilities
  ☆101Updated 3 months ago
• raesene / teisteanas
  ☆20Updated 8 months ago
• kubescape / sneeffer
  Sneefer is a PoC project showing how to filter out irrelevent vulnerabilities from container image vulnerability scan results. It is base…
  ☆26Updated last year
• aquasecurity / trivy-checks
  ☆45Updated this week
• raesene / eathar
  ☆24Updated 8 months ago
• k8sstormcenter / honeycluster
  Threat-informed defense for cloudnative: Reference Implementation of a so-called Honeycluster - for kind (and GKE, RKE2, AKS)
  ☆29Updated this week
• praetorian-inc / snowcat
  a tool to audit the istio service mesh
  ☆173Updated 3 years ago
• slashben / beat-ac-cosign-verifier
  This is a POC repository showing how a Kubernetes Admission Controller can be made irrelevant when verifying container image signatures
  ☆12Updated 2 years ago
• grafana / pySigma-backend-loki
  pySigma backend for generating Grafana Loki/LogQL rules
  ☆37Updated 2 weeks ago
• kubescape / regolibrary
  The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.
  ☆123Updated this week
• raesene / container-security-site
  ☆92Updated 8 months ago
• keptn-sandbox / keptn-in-a-box
  Automation for delivering keptn on microk8s for autonomous cloud workshops
  ☆13Updated 2 years ago
• mchmarny / vimp
  Compare data from multiple vulnerability scanners to get a more complete picture of potential exposures.
  ☆61Updated last year
• IBM / sbom-utility
  This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility
  ☆61Updated last year
• blackberry / Falco-bypasses
  Research on various techniques to bypass default falco ruleset (based on falco v0.28.1).
  ☆80Updated 11 months ago
• wiz-sec-public / namespacehound
  NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.
  ☆77Updated 2 weeks ago
• clouditor / clouditor
  The Clouditor is a tool to support continuous cloud assurance. Developed by Fraunhofer AISEC.
  ☆75Updated this week
• ksoclabs / kube-goat
  A deliberately vulnerable Kubernetes cluster
  ☆120Updated last year
• falcosecurity / plugins
  Falco plugins registry
  ☆87Updated this week