praetorian-inc / snowcatLinks
a tool to audit the istio service mesh
☆173Updated 3 years ago
Alternatives and similar repositories for snowcat
Users that are interested in snowcat are comparing it to the libraries listed below
Sorting:
- Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.☆161Updated last year
- ☆40Updated last month
- Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect☆23Updated last week
- Runtime security plug to protect user containers☆65Updated last month
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆100Updated 5 months ago
- Open Source runtime scanner for k8s cluster and perform security audit checks based on CIS Kubernetes Benchmark specification☆67Updated 5 months ago
- Dynamic Application and API Security Testing☆192Updated 2 years ago
- ☆29Updated 4 months ago
- Kubernetes Common Configuration Scoring System☆124Updated 2 years ago
- Kubernetes audit logging, when you don't control the control plane☆81Updated this week
- ☆98Updated 4 months ago
- Cloud Native Security Hub - Security Resources☆54Updated 5 years ago
- ☆54Updated 2 weeks ago
- Kubernetes Admission Controller for Image Scanning using OPA☆51Updated last year
- Scans SBOMs for vulnerabilities with Grype☆82Updated this week
- The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.☆125Updated 3 weeks ago
- Discover vulnerabilities and container image misconfiguration in production environments.☆56Updated last week
- Dockerfile Security Checker using OPA Rego policies with Conftest☆60Updated 2 years ago
- Links and resources for the O'Reilly Kubernetes Security book☆99Updated 4 years ago
- An admission controller service and kubectl plugin to handle container drift in K8s clusters☆124Updated 3 years ago
- book website☆69Updated 3 years ago
- CLI for searching Rego policies☆105Updated 3 years ago
- PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…☆71Updated 2 years ago
- vexctl is a tool to attest VEX impact statements☆44Updated 2 years ago
- Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko gene…☆104Updated last year
- Supporting code and demos for KubeCon EU 2023 talk "Malicious Compliance: Reflections on Trusting Container Image Scanners"☆67Updated last year
- Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env☆103Updated 5 years ago
- ☆113Updated this week
- Clean accounts over permissions in GCP infra at scale☆71Updated 2 years ago
- This is just a proof-of-concept project that aims to sign and verify container images using cosign and OPA (Open Policy Agent)☆62Updated 3 years ago