Kubescape
/All repositories
Overview
HEALTH SCORE
Healthy
75out of 100
Solid development cadence and security posture. Maintainer coverage keeps the score from reaching Excellent.
LIFECYCLE
Active
Consistent commits, responsive maintainers, regular releases, and healthy issue triage.
Health breakdown
Healthy(75/100)
Maintainer availability, known risks and supply chain posture, and whether the project is actively developed or appropriately stable.
Maintainer responsiveness
Median response time is 7 days.
Bus factor
15 active maintainers currently have merge rights.
Organization Diversity
Contributors span 336 organizations.
Archived repositories are excluded from Health Score.
Project Achievements
Leaderboards
About
Kubescape is an open-source tool for testing if Kubernetes is deployed securely according to multiple frameworks: regulatory, customized company policies and DevSecOps best practices, such as the NSA-CISA hardening guidance and the MITRE ATT&CK® .
Kubescape scans K8s clusters, YAML files, and HELM charts, and detect misconfigurations and software vulnerabilities at early stages of the CI/CD pipeline and provides a risk score instantly and risk trends over time. Kubescape integrates natively with other DevOps tools, including Jenkins, CircleCI and Github workflows. Kubescape policies are based on Open Policy Agent and the REGO language.
A key idea behind Kubescape it to put security capabilities at the hands of the Developers and the DevOps teams. Our vision is to create a wide open-source Kubernetes security project with capabilities that will span across configuration control, vulnerabilities, RBAC management and runtime security - all made for developers and DevOps to add to their tools in a native way.
First commit
Software value
$86M
Maturity
Incubating
License(s)
Apache-2.0
CC-BY-4.0
Data sources
Git
Hacker News
GitHub