Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

📦 Make security testing of K8s, Docker, and Containerd easier.

🧵 CLI tool for directly patching container images!

veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集

Metarget is a framework providing automatic constructions of vulnerable infrastructures.

A Blazing fast Security Auditing tool for Kubernetes

opensecurity: open-source security and compliance. See and secure your cloud, containers, code, networks, deployments, devices. Define your rules, get precise checks, fix gaps fast. Streamlined audits. No fluff.

Give each AI agent its own isolated machine with root, Docker, and systemd. Active defense detects and stops threats automatically.

Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, workloads, dockerfile)

awesome resources about cloud native security 🐿

Help building an adaptive and fine-grained pod security policy

k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.

🧰 Multi Tool Kubernetes Pentest Image

Inspect certificate authorities in container images

🔐 Docker Container for Penetration Testing & Security

🏴‍☠️ Hacking Guides, Demos and Proof-of-Concepts 🥷

OpenShift Guide. Learn about the Red Hat OpenShift Container Platform, Data Science, Code Ready Containers, Podman, Buildah, and Kubernetes.

A collection of tools to improve your containerized apps security posture

Deep research for your infra. Cynative runs frontier models across your code, cloud and runtime - reasoning through GitHub, GitLab, AWS, GCP, Azure and Kubernetes as one system - and comes back with verified answers.