k8scan

A Kubernetes security scanner that analyzes Helm charts and manifests to detect misconfigurations, exposed secrets, RBAC flaws, and container escape vectors. It correlates findings into Capability Breaks and multi-stage attack paths with proof-of-concept commands. It targets developers, operations, and security teams in organizations of all sizes, from startups to enterprises. It is available as a SaaS platform or on-premises deployment, with static analysis for CI/CD integration.

Key features

• 123+ security checks across 8 categories
• Capability Break Engine for attack modeling
• Compound Attack Paths with MITRE ATT&CK mapping
• Validation-grade PoC commands
• Helm and manifest static analysis
• CI/CD integration (GitHub Actions, GitLab CI)
• HTML, JSON, SARIF report formats
• Scheduled scanning and API access
• On-prem deployment with zero data egress
• CIS Benchmark mapped checks