praetorian-inc / snowcat
a tool to audit the istio service mesh
☆173Updated 3 years ago
Alternatives and similar repositories for snowcat:
Users that are interested in snowcat are comparing it to the libraries listed below
- ☆25Updated 11 months ago
- Kubernetes audit logging, when you don't control the control plane☆73Updated this week
- Runtime security plug to protect user containers☆65Updated last month
- Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect☆23Updated this week
- Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.☆161Updated last year
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆82Updated 3 months ago
- ☆29Updated 2 months ago
- ☆94Updated 2 months ago
- Open Source runtime scanner for k8s cluster and perform security audit checks based on CIS Kubernetes Benchmark specification☆66Updated 3 months ago
- Dockerfile Security Checker using OPA Rego policies with Conftest☆59Updated 2 years ago
- Cloud Native Security Hub - Security Resources☆54Updated 5 years ago
- Dynamic Application and API Security Testing☆192Updated 2 years ago
- K8s Network Policy Migrator is a tool to migrate Calico or Cilium custom network policies to Kubernetes native network policy. The tool o…☆30Updated last year
- The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.☆125Updated this week
- Kubernetes Common Configuration Scoring System☆124Updated 2 years ago
- ☆53Updated 2 weeks ago
- A replacement for "kubectl exec" that works over WebSocket connections.☆38Updated last year
- Links and resources for the O'Reilly Kubernetes Security book☆98Updated 4 years ago
- A repository to store Rad Fingerprinting data.☆24Updated 8 months ago
- BadRobot - Operator Security Audit Tool☆218Updated last week
- An admission controller service and kubectl plugin to handle container drift in K8s clusters☆124Updated 3 years ago
- Kubernetes Admission Controller for Image Scanning using OPA☆50Updated last year
- Kubernetes Native, Runtime Container Image Scanning☆39Updated 3 years ago
- vexctl is a tool to attest VEX impact statements☆44Updated 2 years ago
- Compares and analyzes GCP IAM roles.☆77Updated last month
- Clean accounts over permissions in GCP infra at scale☆71Updated last year
- Discover vulnerabilities and container image misconfiguration in production environments.☆55Updated last month
- Owasp Zap chart for Kubernetes☆50Updated 3 years ago
- Scans SBOMs for vulnerabilities with Grype☆79Updated last week
- Static analysis for CloudFormation templates to identify common misconfiguration☆57Updated 3 years ago