Kubernetes Security Security Tools

I think Edera is incredibly dope - they offer a simple deployment that offers robust runtime protection for your cloud environments. They introduce a hypervisor to kubernetes nodes that isolates containers as virtual machines instead of as processes. It provides an elegant solution to the specific problem of container isolation.

AccuKnox began with the open source project KubeArmor and has since built into a larger CNAPP platform. Their specialization is runtime protection policies for Kubernetes, which allows for granular rules on which processes can access which files.

Tigera built the Calico network plugin for K8s and has since expanded into a larger cloud security offering focusing primarily on Kubernetes protection and observability. They remain the most robust on network protection, offering deep insights into what's traversing your network.

ARMO has all of the features of a CNAPP, but with a special emphasis on runtime security and Kubernetes. Their open source Kubescape is a great tool for scanning Kubernetes clusters, and their paid offering provides true CADR runtime protection and compliance features.

Nirmata is a platform built for enforcing policies in your cloud environnment (but mostly Kubernetes). It functions as an admission controller and policy engine, allowing you to enforce checks for all your Kubernetes changes.

Bifrost profiles application behaviors in Kubernetes and creates enforcement policies based on the observed behavior.