Alternatives and similar repositories for kube-goat:

Users that are interested in kube-goat are comparing it to the libraries listed below

• raesene / kube_security_lab
  ☆235Updated 4 months ago
• tenable / KaiMonkey
  KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.
  ☆97Updated last year
• cyberark / kubernetes-rbac-audit
  Tool for auditing RBACs in Kubernetes
  ☆215Updated 11 months ago
• Alevsk / dvka
  Damn Vulnerable Kubernetes App (DVKA) is a series of apps deployed on Kubernetes that are damn vulnerable.
  ☆86Updated 5 months ago
• securekubernetes / securekubernetes
  Attacking and Defending Kubernetes Clusters: A Guided Tour
  ☆206Updated 3 years ago
• WithSecureLabs / IceKube
  ☆171Updated last month
• 4ARMED / kubeletmein
  Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.
  ☆160Updated last year
• raesene / container-security-site
  ☆92Updated 8 months ago
• madhuakula / hacker-container
  The Swiss Army Container for Cloud Native Security. Container with all the list of useful tools/commands while hacking and securing Conta…
  ☆267Updated last year
• OWASP / www-project-kubernetes-security-testing-guide
  OWASP Kubernetes Security Testing Guide
  ☆37Updated 4 months ago
• jatrost / awesome-kubernetes-threat-detection
  A curated list of resources about detecting threats and defending Kubernetes systems.
  ☆370Updated last year
• OWASP / www-project-top-10-ci-cd-security-risks
  OWASP Foundation Web Respository
  ☆81Updated 4 months ago
• OWASP / KubeLight
  OWASP Kubernetes security and compliance tool [WIP]
  ☆105Updated last year
• threatcl / threatcl
  Documenting your Threat Models with HCL
  ☆412Updated 4 months ago
• praetorian-inc / snowcat
  a tool to audit the istio service mesh
  ☆173Updated 3 years ago
• banzaicloud / dast-operator
  Dynamic Application and API Security Testing
  ☆190Updated last year
• quarkslab / kdigger
  Kubernetes focused container assessment and context discovery tool for penetration testing
  ☆443Updated 7 months ago
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆170Updated last month
• SDA-SE / cluster-image-scanner
  Discover vulnerabilities and container image misconfiguration in production environments.
  ☆54Updated this week
• gunjan5 / container-security
  Container 📦 Security 🔐 Best Practices Checklist 📋 & Slides
  ☆65Updated 4 years ago
• hysnsec / awesome-policy-as-code
  A curated list of policy-as-code resources like blogs, videos, and tools to practice on for learning Policy-as-Code.
  ☆184Updated last year
• PaloAltoNetworks / rbac-police
  Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego
  ☆341Updated last year
• NodyHub / k8s-ctf-rocks
  Kubernetes Easter CTF
  ☆58Updated 4 years ago
• chughes757 / SecureSoftwareSupplyChain
  This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.
  ☆137Updated 2 years ago
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆93Updated 7 months ago
• latiotech / insecure-kubernetes-deployments
  A full insecure kubernetes application for testing security tools
  ☆64Updated last week
• mauilion / blackhat-2019
  ☆48Updated 4 years ago
• OWASP / www-project-devsecops-guideline
  The OWASP DevSecOps Guideline explains how we can implement a secure pipeline and use best practices and introduce tools that we can use …
  ☆62Updated 7 months ago
• Vinum-Security / kubernetes-security-checklist
  Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, wor…
  ☆472Updated 3 years ago