kube-bench
CIS Kubernetes Benchmark compliance checker that audits a cluster's configuration against official security best practices.
- Actively maintained
- Foundation-backed
- Well documented
- Permissive license
Overview
kube-bench runs the checks defined in the CIS Kubernetes Benchmark - a widely used, official security configuration standard - against a running cluster, reporting exactly which settings pass or fail and why. It runs as a job inside the cluster it's checking, so it tests the actual live configuration rather than static manifests.
kube-bench is a fit for teams that need to demonstrate or verify Kubernetes configuration compliance against a recognized standard, a distinct, narrower intent than Trivy's broader vulnerability scanning or Kyverno's ongoing policy enforcement (also in this catalog).
Why it's in this catalog
Catalog rating: ★★☆☆☆ (2/5)
CIS benchmark compliance checker for Kubernetes, a narrow but useful security-testing niche.
- Mature
- Foundation-governed
- Categories
- Testing
- Languages
- Go
- License
- Apache-2.0
Related Projects
Kubescape
Apache-2.0Kubernetes security posture and compliance scanner that checks clusters against security frameworks and best practices.
Actively maintained
- DevOps
Playwright
Apache-2.0Reliable end-to-end testing and browser automation framework for modern web apps.
Actively maintained
- Developer Tools
- Testing
Chaos Mesh
Apache-2.0Cloud-native chaos engineering platform for Kubernetes that injects controlled faults - pod, network, I/O, and more - to test how a system actually behaves under failure.
Actively maintained
- Testing
Cypress
MITJavaScript end-to-end testing framework built for the modern web with fast, reliable testing.
Actively maintained
- Testing
Spotted an error? Suggest an edit on GitHub.