k8s-audit · House #25,894

What it is

Calls itself “Kubernetes security audit”.

• Calls itself: Kubernetes security audit

“A fast, dependency-light Kubernetes security audit”

Where it puts itself

Claims “the opinionated 30-second first pass”. Rules out “Nothing leaves your machine”.

• Superlative claim: the opinionated 30-second first pass
• Says it will not: Nothing leaves your machine

“It is the fast first pass before kube-bench or Kubescape, not a replacement.”

“…k8s-audit is the opinionated 30-second first pass”

What it costs

A free tier, free forever.

• Free plan: free forever

“MIT licensed, and it now writes a single-file HTML report you can share.”

Who it sells to

Sells to developers.

• Sells to: developers

“Drop this into .github/workflows/k8s-security-audit.yml to fail a PR that introduces a privileged container or an unprotected namespace”

How it runs

A command-line tool. Runs locally and works offline. No API. Open source.

• Kind: cli
• Runs where: on the device, offline
• API: no
• Open source: yes

“One bash script, 16 read-only security checks, about 30 seconds.”

“Nothing is deployed into your cluster and nothing leaves your machine.”

What it works with

Names Kubescape, Trivy and 1 more on its pages.

• Names: Kubescape · Trivy · kube-bench

“Kubescape”

“Trivy”

What it offers as proof

Live, no waitlist. Compliance: SOC2. Try it without signing up. Publishes docs.

• Compliance: SOC2
• Trial asks for: nothing

“No install required — just clone and run:”

“CIS & SOC2 mappings”