Kubescape.

An open-source Kubernetes security platform from ARMO that scans clusters, manifests, and images for misconfigurations, vulnerabilities, and policy drift. It belongs to the Cloud Security category of cybersecurity.

An open-source Kubernetes security platform from ARMO that scans clusters, manifests, and images for misconfigurations, vulnerabilities, and policy drift.

Kubescape was created by ARMO and accepted into the CNCF as a Sandbox project in 2022. It runs as a CLI, GitHub Action, Kubernetes operator, or hosted service to evaluate clusters against frameworks such as NSA-CISA Hardening Guidance, MITRE ATT&CK for Containers, the CIS Kubernetes Benchmark, and ARMO's own controls. Beyond posture scanning, modern Kubescape integrates image vulnerability scanning, RBAC analysis, network-policy generation, and runtime correlation. It outputs scores, control failures, and resource-level fix suggestions in JSON, PDF, or HTML. Teams typically combine Kubescape with kube-bench, Trivy, Falco, and admission controllers in a layered KSPM (Kubernetes Security Posture Management) stack.

Defences for Kubescape typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: ARMO Kubescape.