4
Sysdig Secure
Sysdig Secure is a cloud-native application protection platform for cloud environments, containers, Kubernetes, hosts, and serverless workloads.
WebAPILinuxmacOS
7.2From $20 a month
Visit
5
Fairwinds Polaris
Fairwinds Polaris is an open source policy engine that validates and can remediate Kubernetes resource configuration.
Free planWebLinuxmacOSSelf-hosted
7.1Free plan
Visit
6
Trivy Operator
Trivy Operator is a free, self-hosted Kubernetes operator that scans clusters for security issues and stores reports as Kubernetes resources,…
Free planOpen sourceAPILinuxSelf-hosted
6.9Free plan
Visit
7
KSPM Pro
Free planWeb
6.5From $100 a month
Visit
8
KubeArmor
KubeArmor is an open-source runtime security system for hardening cloud-native workloads and enforcing policies while they run.
Free planAPILinuxSelf-hosted
6.5Free plan
Visit
9
Nirmata Control Hub
Nirmata Control Hub centralizes Kubernetes policy governance, compliance, image risk, exceptions, and remediation.
WebAPILinuxSelf-hosted
6.4From $1,250 a month
Visit
10
Tetragon
Tetragon is a security observability and runtime enforcement tool for Linux, containers, and Kubernetes workloads.
Free planAPILinuxSelf-hosted
6.4Free plan
Visit
11
KubeLinter
KubeLinter is a free, open-source tool for statically checking Kubernetes YAML files, Helm charts and Kustomize manifests for production-readiness and security practices.
Free planLinuxmacOSSelf-hosted
6.2Free plan
Visit
12
Kubewarden
Kubewarden is an open-source security platform for Kubernetes workloads, with components that can be used together or independently.
LinuxmacOSSelf-hostedWindows
6.1
Visit
13
Monokle
Monokle Desktop is a free, open-source IDE for creating, exploring, and validating Kubernetes YAML configurations.
Free planExtensionLinuxmacOSWindows
6.1Free plan
Visit
14
bifrost security
bifrost security provides runtime protection for containerised workloads by using observed behaviour to prioritize CVEs and create tailored kernel-enforced profiles.
WebAPILinuxSelf-hosted
6.0
Visit
15
Falco
Falco is an open source runtime security project for Linux and self-hosted environments.
Free planLinuxSelf-hosted
6.0Free plan
Visit
16
Red Hat OpenShift Pipelines
Red Hat OpenShift Pipelines automates application delivery on Red Hat OpenShift using a cloud-native CI/CD approach built on Tekton.
WebAPILinuxSelf-hosted
6.0
Visit
17
Tracee
Tracee is a free runtime security and observability tool for Linux that uses eBPF to monitor system calls, network activity, and file operations in real time.
Free planLinuxSelf-hosted
6.0Free plan
Visit
18
ARMO Platform
ARMO Platform is a runtime-powered, Kubernetes-driven cloud security platform available as a web service or self-hosted installation.
WebSelf-hosted
5.8
Visit
19
AccuKnox
AccuKnox is a Zero Trust Security platform covering AI, API, application, cloud, and supply chain security.
WebLinuxSelf-hosted
5.7
Visit
20
Calico Enterprise
Calico Enterprise is Tigera’s paid, self-managed platform for network security and observability in Kubernetes clusters.
WebLinuxSelf-hostedWindows
5.7
Visit
21
JFrog Runtime
JFrog Runtime is a paid web product for Security and DevOps teams monitoring Kubernetes clusters in real time.
Web
5.5
Visit
22
Aqua Security
WebLinux
5.3
Visit
23
Trend Vision One Container Security
Web
5.1
Visit
24
SUSE NeuVector
SUSE NeuVector is a free, open-source Kubernetes security product designed for self-hosted deployment.
Web
5.0
Visit
25
kube-bench
Linux
4.6
Visit
26
kube-hunter
Web
4.6
Visit

Back to Red Hat Advanced Cluster Security for Kubernetes