Kubescape

Kubescape scans Kubernetes clusters, manifests, and Helm charts against established security frameworks - like the NSA-CISA hardening guide and MITRE ATT&CK - and configuration best practices, producing a risk score and specific, actionable findings rather than a wall of raw output. It covers posture and compliance rather than active runtime threat detection.

Kubescape is a fit for teams that need to assess and report on their overall Kubernetes security posture, complementing kube-bench's narrower CIS benchmark focus and Falco's runtime detection (also in this catalog) with a broader compliance and posture view.