Kube-scan: Octarine K8s cluster risk assessment tool

Octarine, a startup that helps automate security of Kubernetes workloads, released an open-source scanning tool called Kube-scan, designed to help developers understand the level of security risk in their Kubernetes clusters.

They also open-sourced a second tool called The Kubernetes Common Configuration Scoring System, or KCCSS for short, which is the underlying configuration framework used in Kube-scan.

“There are 30 security settings in Kubernetes, and Kube-scan can help you see where you might be vulnerable on any one of them, measured on a scale of 0-10, with 10 being extremely vulnerable.”

Kube-Scan: https://github.com/octarinesec/kube-scan

KCSS: https://github.com/octarinesec/kccss

Press release: https://techcrunch.com/2020/01/22/octarine-releases-open-sou...