Definition
A KSPM reads the cluster objects through its API: deployments, pods, service accounts, roles, network policies, and compares them to rules such as the Pod Security Standards. It also looks at the images run and their vulnerabilities.
Glossary
KSPM
Kubernetes Security Posture Management: the configuration of your clusters, privileged containers, overly broad RBAC, exposed API, vulnerable images, checked continuously.
In Ctadel
The Kubernetes scanner covers EKS, AKS, GKE, Kapsule, MKS and OKS, discovered from the cloud account or connected by kubeconfig. Workloads, RBAC, network policies and images enter the same graph as the cloud hosting the cluster.
See it on your accounts
The online demonstration is open to all, on fictitious data. For an instance on your own accounts, request a demonstration.