Container Security

Container & Kubernetes vulnerability scanning with automated remediation

Container and Kubernetes security platform with runtime visibility and detection

Container security scanning with reachability and exploitability analysis

Container security scanning and vulnerability management solution

Full lifecycle container security platform from build to runtime

K8s security platform with KSPM, runtime protection, and admission control

Sandbox for analyzing container images to detect advanced malware before prod.

Container image scanning tool for Kubernetes & Docker with CVE detection

Container image scanning & runtime security for containerized applications

KSPM solution for detecting and remediating Kubernetes misconfigurations

Policy enforcement & compliance mgmt for container security across SDLC

Container security scanning from development to deployment environments

Container and Linux workload security for hybrid and multi-cloud environments

Container security platform with image scanning, admission control, and runtime

Container security platform scanning images, enforcing K8s policies & runtime threats

kube-hunter is a security scanning tool that identifies vulnerabilities and security weaknesses in Kubernetes clusters through automated assessment and provides detailed reporting with remediation guidance.

An educational repository providing structured lab materials and scripts for learning container technologies and their internal mechanisms.

A Golang-based container security scanner that identifies potential vulnerabilities and misconfigurations in container environments by checking namespacing, capabilities, security profiles, and host device mounts.

A book that helps improve Docker security by covering risks and countermeasures

NBD (Network Block Device) is a network protocol implementation that allows clients to access remote block devices over a network as if they were local storage.

MKIT is a Docker-based security assessment tool that identifies common misconfigurations in managed Kubernetes clusters across AKS, EKS, and GKE platforms.

A container compliance and vulnerability assessment tool that uses OpenSCAP to scan Docker images and running containers for security vulnerabilities and compliance violations.

An open-source script that performs automated security assessments of Docker containers and hosts against CIS Docker Benchmark standards.

Exploring the transition towards real sandbox containers and the differences in privileges compared to traditional sandboxes like Chrome.