Community curated list of System and Network policy templates for the KubeArmor and Cilium
☆52Aug 14, 2026Updated last month
Alternatives and similar repositories for policy-templates
Users that are interested in policy-templates are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Discover least permissive security posture, Network Microsegmentation, and Application behaviour based on visibility/observability data e…☆36May 19, 2025Updated last year
- AccuKnox CI/CD Action for Container Security Scan☆19Feb 26, 2026Updated 7 months ago
- AccuKnox CI/CD Action for IaC Security Scan☆19May 15, 2026Updated 4 months ago
- KubeArmor cli tool aka kArmor☆45Sep 24, 2026Updated last week
- Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (…☆2,624Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A small library to alter AWS API requests; Used for fuzzing research☆22Nov 2, 2023Updated 2 years ago
- An eBPF-based security research tool that demonstrates offensive techniques including network discovery, file system monitoring, process …☆41Jul 4, 2026Updated 2 months ago
- Intent driven security automation framework☆27Aug 12, 2025Updated last year
- A comprehensive framework and assessment toolkit for measuring and improving Cloud Native security maturity across 8 critical business fu…☆10Jun 24, 2025Updated last year
- ☆55Aug 20, 2026Updated last month
- Code repository for experiments in SpecROP paper☆13Sep 3, 2021Updated 5 years ago
- An agentic AI dashboard app that uses AWS Strands SDK. KubeArmor based least-permissive security is showcased.☆16Aug 23, 2026Updated last month
- Terraform Provider to manage OWASP DependencyTrack☆17Sep 11, 2026Updated 3 weeks ago
- Cloud Detection & Response GOAT is a scenario-driven, intentionally vulnerable framework designed to help defenders validate detection pi…☆21Aug 31, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Defending IaaS with ATT&CK is a project to create a collection of ATT&CK techniques relevant to a Linux IaaS environment, as well as a me…☆16May 28, 2025Updated last year
- 🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their sig…☆79Dec 4, 2025Updated 9 months ago
- A curated collection of scripts for kernel-related devops☆14Nov 23, 2023Updated 2 years ago
- ⚡ k8s event logger operator - logs configured events to stdout in order to not lose them☆10Updated this week
- Yoda: Post-exploitation tool using eBPF xdp / AF_XDP, running on a userspace gVisor network stack☆16Aug 13, 2025Updated last year
- ☆18Oct 9, 2023Updated 2 years ago
- Linux kernel configs for popular distros.☆66Jun 22, 2026Updated 3 months ago
- trust-manager is an operator for distributing trust bundles across a Kubernetes cluster.☆403Updated this week
- This repository contains examples of Kyverno policies for controlling the creation of Cilium Network policies☆22Nov 2, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- OpenReports API (Kubernetes CRD)☆47Jun 8, 2026Updated 3 months ago
- OASIS TC Open Repository: A GitHub public repository for development of a python library to transform between data-interchange formats (s…☆15Feb 10, 2022Updated 4 years ago
- A read-only dashboard for Salt jobs☆20Jan 3, 2023Updated 3 years ago
- Nitko web server scanner☆16Sep 25, 2019Updated 7 years ago
- ☆11Nov 22, 2021Updated 4 years ago
- ☆115Sep 25, 2026Updated last week
- Analysis on Kernel Self-Protection: Understanding Security and Performance Implication☆19Apr 20, 2020Updated 6 years ago
- kCFI Documentation☆15Apr 18, 2017Updated 9 years ago
- XDP Virtual Server - an eBPF load balancer implementation and supporting Go library☆25Aug 30, 2026Updated last month
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Detect intrusions that happened in your Kubernetes cluster through audit logs using Falco☆63Jun 2, 2021Updated 5 years ago
- This rap optimizations and hl_cfi have be merged in hardenedlinux/linux-unofficial_grsec☆18Oct 3, 2019Updated 7 years ago
- Rego policies collection☆171Updated this week
- Helm Chart to deploy Twistlock Defender☆16May 29, 2026Updated 4 months ago
- An simple application with an HTTP server & SQLite database.☆16May 30, 2021Updated 5 years ago
- ☆12Apr 22, 2025Updated last year
- ansible roles to download and install empire (BC-Security),deathstar(byt3bl33der) and starkiller (BC-Security)☆24May 8, 2022Updated 4 years ago