Community curated list of System and Network policy templates for the KubeArmor and Cilium
☆51Aug 14, 2026Updated 3 weeks ago
Alternatives and similar repositories for policy-templates
Users that are interested in policy-templates are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Discover least permissive security posture, Network Microsegmentation, and Application behaviour based on visibility/observability data e…☆35May 19, 2025Updated last year
- AccuKnox CI/CD Action for Container Security Scan☆19Feb 26, 2026Updated 6 months ago
- KubeArmor cli tool aka kArmor☆45Updated this week
- Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (…☆2,611Updated this week
- A small library to alter AWS API requests; Used for fuzzing research☆22Nov 2, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- An eBPF-based security research tool that demonstrates offensive techniques including network discovery, file system monitoring, process …☆40Jul 4, 2026Updated 2 months ago
- Intent driven security automation framework☆27Aug 12, 2025Updated last year
- A comprehensive framework and assessment toolkit for measuring and improving Cloud Native security maturity across 8 critical business fu…☆10Jun 24, 2025Updated last year
- This repository provides a comprehensive collection of Pulumi scenarios utilized by cnappgoat☆22Jan 28, 2025Updated last year
- ☆55Aug 20, 2026Updated 3 weeks ago
- https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development☆44Jan 15, 2022Updated 4 years ago
- An agentic AI dashboard app that uses AWS Strands SDK. KubeArmor based least-permissive security is showcased.☆16Aug 23, 2026Updated 3 weeks ago
- Cloud Detection & Response GOAT is a scenario-driven, intentionally vulnerable framework designed to help defenders validate detection pi…☆21Aug 31, 2026Updated last week
- 🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their sig…☆79Dec 4, 2025Updated 9 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- CLI for actuated☆26Aug 21, 2026Updated 3 weeks ago
- LLVM trunk with poolalloc trunk modified to compile only DSA☆12Jul 9, 2015Updated 11 years ago
- A curated collection of scripts for kernel-related devops☆14Nov 23, 2023Updated 2 years ago
- bpflock - eBPF driven security for locking and auditing Linux machines☆157Feb 16, 2022Updated 4 years ago
- Yoda: Post-exploitation tool using eBPF xdp / AF_XDP, running on a userspace gVisor network stack☆16Aug 13, 2025Updated last year
- ☆18Oct 9, 2023Updated 2 years ago
- Linux kernel configs for popular distros.☆65Jun 22, 2026Updated 2 months ago
- trust-manager is an operator for distributing trust bundles across a Kubernetes cluster.☆399Updated this week
- This repository contains examples of Kyverno policies for controlling the creation of Cilium Network policies☆22Nov 2, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- OpenReports API (Kubernetes CRD)☆48Jun 8, 2026Updated 3 months ago
- OASIS TC Open Repository: A GitHub public repository for development of a python library to transform between data-interchange formats (s…☆15Feb 10, 2022Updated 4 years ago
- Nitko web server scanner☆16Sep 25, 2019Updated 6 years ago
- Ledger Donjon CTF 2020☆17Nov 16, 2021Updated 4 years ago
- ☆115Mar 29, 2026Updated 5 months ago
- Analysis on Kernel Self-Protection: Understanding Security and Performance Implication☆19Apr 20, 2020Updated 6 years ago
- kCFI Documentation☆15Apr 18, 2017Updated 9 years ago
- Welcome to github repository for Visual Cloud Delivery Network. This repository will provide the Ansible playbooks for installing the com…☆22Dec 16, 2024Updated last year
- Detect intrusions that happened in your Kubernetes cluster through audit logs using Falco☆63Jun 2, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- This rap optimizations and hl_cfi have be merged in hardenedlinux/linux-unofficial_grsec☆18Oct 3, 2019Updated 6 years ago
- Rego policies collection☆171Updated this week
- Helm Chart to deploy Twistlock Defender☆16May 29, 2026Updated 3 months ago
- Automated recovery of Linux kernel build configurations☆26Jan 14, 2022Updated 4 years ago
- ☆12Apr 22, 2025Updated last year
- ansible roles to download and install empire (BC-Security),deathstar(byt3bl33der) and starkiller (BC-Security)☆24May 8, 2022Updated 4 years ago
- Sbommage is an interactive terminal frontend for viewing Software Bill of Materials (SBOM) files in various formats.☆39Nov 10, 2025Updated 10 months ago