Community curated list of System and Network policy templates for the KubeArmor and Cilium
☆52Aug 14, 2026Updated 2 months ago
Alternatives and similar repositories for policy-templates
Users that are interested in policy-templates are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Discover least permissive security posture, Network Microsegmentation, and Application behaviour based on visibility/observability data e…☆36May 19, 2025Updated last year
- AccuKnox CI/CD Action for IaC Security Scan☆19May 15, 2026Updated 5 months ago
- AccuKnox CI/CD Action for Container Security Scan☆19Feb 26, 2026Updated 7 months ago
- KubeArmor cli tool aka kArmor☆45Updated this week
- Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (…☆2,630Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A small library to alter AWS API requests; Used for fuzzing research☆22Nov 2, 2023Updated 2 years ago
- Intent driven security automation framework☆27Aug 12, 2025Updated last year
- An eBPF-based security research tool that demonstrates offensive techniques including network discovery, file system monitoring, process …☆42Oct 14, 2026Updated last week
- A comprehensive framework and assessment toolkit for measuring and improving Cloud Native security maturity across 8 critical business fu…☆10Jun 24, 2025Updated last year
- This repository contains examples of Kyverno policies for controlling the creation of Cilium Network policies☆22Nov 2, 2023Updated 2 years ago
- Self-Hosted AI Assistant for Data Analytics. Designed with Data Security as a Top Priority☆17Apr 5, 2026Updated 6 months ago
- This repository provides a comprehensive collection of Pulumi scenarios utilized by cnappgoat☆22Jan 28, 2025Updated last year
- ☆55Updated this week
- https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development☆44Jan 15, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- An agentic AI dashboard app that uses AWS Strands SDK. KubeArmor based least-permissive security is showcased.☆16Aug 23, 2026Updated 2 months ago
- A Web Self Service Application for Generating OpenC2 Commands☆10Sep 26, 2019Updated 7 years ago
- Terraform Provider to manage OWASP DependencyTrack☆17Updated this week
- Source code of the double-fetch bug detection approach based on Coccinelle engine☆10Jan 2, 2017Updated 9 years ago
- Operator is an in-cluster component of the Kubescape security platform. It allows clients to connect to itself, listens for commands from…☆24Oct 16, 2026Updated last week
- Infrastructure-as-code for a serverless knowledge base using Amazon Bedrock, Aurora PostgreSQL (with pgvector), Lambda, and S3. This setu…☆19Mar 23, 2025Updated last year
- Cloud Detection & Response GOAT is a scenario-driven, intentionally vulnerable framework designed to help defenders validate detection pi…☆21Oct 7, 2026Updated 2 weeks ago
- Defending IaaS with ATT&CK is a project to create a collection of ATT&CK techniques relevant to a Linux IaaS environment, as well as a me…☆16May 28, 2025Updated last year
- 🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their sig…☆79Dec 4, 2025Updated 10 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- An MCP server that allows you to run TypeScript, JavaScript, and Python code in a sandbox on your local machine using the Deno® sandbox. …☆13May 3, 2025Updated last year
- bpflock - eBPF driven security for locking and auditing Linux machines☆158Feb 16, 2022Updated 4 years ago
- An in-memory point-in-polygon (reverse geocoding) package for Who's On First data☆10Sep 28, 2017Updated 9 years ago
- CLI for actuated☆26Aug 21, 2026Updated 2 months ago
- ⚡ k8s event logger operator - logs configured events to stdout in order to not lose them☆10Updated this week
- ACP bridge for Claude Code CLI — use your Pro/Max subscription from any ACP-compatible editor☆18Mar 17, 2026Updated 7 months ago
- Linux kernel configs for popular distros.☆66Jun 22, 2026Updated 4 months ago
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆116Jan 2, 2025Updated last year
- Creates PolicyReports based on the different Trivy Operator CRDs like VulnerabilityReports☆67Oct 14, 2026Updated last week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- kCFI Documentation☆14Apr 18, 2017Updated 9 years ago
- Cloud Detection and Response☆12Jul 1, 2025Updated last year
- trust-manager is an operator for distributing trust bundles across a Kubernetes cluster.☆408Updated this week
- OpenReports API (Kubernetes CRD)☆49Jun 8, 2026Updated 4 months ago
- XDP Virtual Server - an eBPF load balancer implementation and supporting Go library☆25Aug 30, 2026Updated last month
- OASIS TC Open Repository: A GitHub public repository for development of a python library to transform between data-interchange formats (s…☆15Feb 10, 2022Updated 4 years ago
- Mean Time To Production benchmark for Flux☆24Aug 27, 2026Updated last month