praetorian-inc / snowcat
a tool to audit the istio service mesh
☆173Updated 3 years ago
Alternatives and similar repositories for snowcat
Users that are interested in snowcat are comparing it to the libraries listed below
Sorting:
- Runtime security plug to protect user containers☆65Updated 3 weeks ago
- Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect☆23Updated last month
- ☆27Updated 2 weeks ago
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆84Updated 4 months ago
- Open Source runtime scanner for k8s cluster and perform security audit checks based on CIS Kubernetes Benchmark specification☆66Updated 5 months ago
- Kubernetes audit logging, when you don't control the control plane☆79Updated last week
- Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.☆161Updated last year
- ☆96Updated 3 months ago
- The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.☆125Updated last week
- Dockerfile Security Checker using OPA Rego policies with Conftest☆60Updated 2 years ago
- EKS NG AMI Updater is an open source project that can be used to update kubernetes node group images.☆28Updated 3 weeks ago
- Supporting code and demos for KubeCon EU 2023 talk "Malicious Compliance: Reflections on Trusting Container Image Scanners"☆67Updated last year
- Cloud Native Security Hub - Security Resources☆54Updated 5 years ago
- ☆29Updated 3 months ago
- Dynamic Application and API Security Testing☆192Updated 2 years ago
- BadRobot - Operator Security Audit Tool☆220Updated last week
- Modular Kubernetes lab which provides an easy and streamlined way to deploy a test cluster with support for different components.☆52Updated last year
- Kubernetes Admission Controller for Image Scanning using OPA☆50Updated last year
- Links and resources for the O'Reilly Kubernetes Security book☆98Updated 4 years ago
- ☆54Updated 2 weeks ago
- A replacement for "kubectl exec" that works over WebSocket connections.☆38Updated last year
- This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility☆60Updated 2 years ago
- ☆112Updated last week
- Kubernetes Native, Runtime Container Image Scanning☆39Updated 3 years ago
- Clean accounts over permissions in GCP infra at scale☆71Updated 2 years ago
- PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…☆70Updated 2 years ago
- An admission controller service and kubectl plugin to handle container drift in K8s clusters☆124Updated 3 years ago
- ☆20Updated 2 weeks ago
- Discover vulnerabilities and container image misconfiguration in production environments.☆56Updated this week
- Rego policies for enterprise-scale Compliance-as-Code with OPA Conftest.☆58Updated last year