What problem it solves

Kubernetes environments require security checks across development, deployment, and runtime, including configuration, vulnerability, compliance, and policy enforcement concerns. Kubescape addresses this by combining on-demand scanning, continuous in-cluster monitoring, remediation, and runtime analysis in one platform.

Key features

• Lifecycle Security Scanning — Scan running clusters, YAML files, Helm charts, and container images against established security frameworks. Results can cover control-plane status, access-control risks, workload misconfigurations, network-policy gaps, and compliance scores.

  Source: README

• Vulnerability and Image Patching — Detect CVEs in container images with Grype and patch vulnerable images with Copacetic. Patched images can be written with a specified output tag.

  Source: README

• Automatic Misconfiguration Remediation — Automatically fix misconfigurations in Kubernetes manifests. The fix workflow supports previews, interactive approval, unattended application, and writing corrected copies without changing the originals.

  Source: README

• Admission Control and Runtime Monitoring — Enforce security policies with Validating Admission Policies and monitor runtime activity through eBPF-based analysis. The in-cluster operator also supports continuous configuration and image vulnerability scanning.

  Source: README

• AI Assistant Integration — Run an MCP server that exposes vulnerability and configuration scan data to AI assistants. This supports natural-language queries about a cluster's security posture.

  Source: README

Quick start

Copied verbatim from the project's README.

curl -s https://raw.githubusercontent.com/kubescape/kubescape/master/install.sh | /bin/bash

Who it may suit

Inference: may suit Kubernetes developers, administrators, platform teams, and security practitioners who need configuration, vulnerability, compliance, or runtime checks in development and deployment workflows.

Topics to discuss

• How should the platform balance automated remediation with review and approval workflows?

• Which integrations and report formats are most valuable for development and CI/CD teams?

• What feedback should guide the priority of scanning, admission control, runtime analysis, and AI-assisted workflows?

Written by ReadmeX AI from the project's README, source and public GitHub data; it may contain mistakes.

Read the original README https://github.com/kubescape/kubescape#readme

ReadmeX opened this community for a trending project; it is not run by the project. Maintainers can claim it from the community page.