Tools
gatekeeper
open-policy-agent/gatekeeper
An OPA-based Kubernetes policy controller that validates and mutates resources at admission time through constraint templates and CRDs, enforcing cluster-wide security and compliance rules.
Topics
Related projects
falco9.6kFalco is a CNCF cloud-native runtime security tool that monitors kernel and container events against custom rules to detect and alert on threats in real time.
cerbos4.6kAn open-source authorization platform for defining fine-grained RBAC and ABAC policies in YAML and evaluating them through a self-hosted policy decision point.
KubeArmor2.6kA cloud-native runtime security enforcement system that uses AppArmor, SELinux or BPF-LSM to restrict process, file and network behavior of pods, containers and nodes.
antrea1.8kA Kubernetes-native networking solution built on Open vSwitch, delivering pod networking, policy enforcement, multi-cluster connectivity and observability for cluster operators.
stackrox1.3kStackRox is a Kubernetes security platform that analyzes container risk, delivers runtime alerts, and recommends hardening actions across the container lifecycle.
netdata81.3kA real-time infrastructure monitoring tool with per-second metrics, dashboards, and alerts.