Kube-bench is a tool that checks whether Kubernetes is deployed securely by running the checks documented in the CIS Kubernetes Benchmark. Tests are configured with YAML files, making this tool easy to update as test specifications evolve. There are multiple ways to run kube-bench, such as inside a pod with access to the host's PID namespace and necessary directories, or by applying the supplied job.yaml file to run the tests as a job.
A cloud native security platform that uses behavioral fingerprinting and runtime verification to detect threats across Kubernetes environments, cloud infrastructure, and software supply chains.
Exploring the transition towards real sandbox containers and the differences in privileges compared to traditional sandboxes like Chrome.
DataCop is a custom AWS framework for mitigating S3 bucket attack vectors based on customer configuration.
A CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems.
Docker's Actuary automates security best-practices checks for Docker containers.
A CLI utility that makes it easier to switch between different AWS roles
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.