Kubescape
Kubescape is an open-source Kubernetes security platform that provides comprehensive, end-to-end security for Kubernetes environments.
Our verdict
Who it's for
Open-source, end-to-end security platform for Kubernetes environments.
Who should look elsewhere
Requires some technical knowledge to set up and configure
Pros
- +Open-source and free to use
- +Comprehensive security coverage from development to runtime
- +Integrates well into existing development and CI/CD workflows
- +Supports multiple security frameworks and compliance standards
- +Actively developed and supported by the CNCF community
Cons
- −Requires some technical knowledge to set up and configure
- −Relies on external tools (OPA, Grype, Copacetic, Inspektor Gadget) for some functionalities
- −Primarily focused on Kubernetes security, not broader cloud security
Key features
- ✓Configuration scanning for Kubernetes manifests, Helm charts, and live clusters
- ✓Vulnerability assessment for known vulnerabilities
- ✓Policy and compliance enforcement against industry standards (CIS Benchmarks, NSA-CISA, MITRE ATT&CK, SOC 2)
- ✓Network policy and seccomp validation
- ✓Runtime monitoring and threat detection
- ✓Developer and CI/CD integration (VSCode, Lens, GitHub Actions, GitLab CI)
- ✓Multi-cloud and distribution support
- ✓Utilizes Open Policy Agent (OPA) for posture controls
Pricing
| Plan | Price | Billing | Notes |
|---|---|---|---|
| Open-source | — | month | Configuration and vulnerability scanning; Policy and compliance enforcement; Network policy and seccomp validation |