aquasecurity

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

Tfsec is now part of Trivy

Hunt for security weaknesses in Kubernetes clusters

Linux Runtime Security and Forensics using eBPF

Cloud Security Posture Management (CSPM)

Kubernetes-native security toolkit

Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

Superseded by https://github.com/aquasecurity/trivy-operator

Show who has RBAC permissions to perform actions on different resources in Kubernetes

eBPF library for Go. Powered by libbpf.

An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

Security Remediation Guides