Awesome Cybersecurity Blue Team
Section: Policy enforcement · Unified toolset and framework for policy across the cloud native stack.
StaleScore 55
Entry
Open Policy Agent (OPA)
Appears in 4 awesome lists
Policy engine that streamlines policy application across microservices, Kubernetes, CI/CD processes, and API gateways, allowing policies to be specified as code using Rego for admission control and workload validation.
Found in these lists
Awesome Cybersecurity Blue Team - CN
Section: 策略执行 · 用于跨云原生环境进行统一策略控制的一套工具集和框架
StaleScore 49
Hacking Tools
Section: Container & Kubernetes Security · Policy engine that streamlines policy application across microservices, Kubernetes, CI/CD processes, and API gateways, allowing policies to be specified as code using Rego for admission control and workload validation.
FreshScore 91
Awesome DevOps
Section: Security · General-purpose policy engine for cloud native environments. oss
FreshScore 93
Often listed next to it
Trivy
A Simple and Comprehensive Vulnerability Scanner for Containers and other Artifacts, Suitable for CI. Trivy detects vulnerabilities of OS packages (Alpine, RHEL, CentOS, etc.) and application dependencies (Bundler, Composer, npm, yarn, etc.). Checks containers and filesystems.
In 10 listsDetails
Grype
Vulnerability scanner for container images and filesystems. Developed by Anchore, it scans container images, directories, and archives for known vulnerabilities. Supports multiple image formats, SBOM integration, and VEX (Vulnerability Exploitability eXchange) for accurate vulnerability…
In 7 listsDetails
Falco
CNCF graduated runtime security standard originally created by Sysdig, monitoring syscalls and Kubernetes audit events in real time using eBPF to detect suspicious behaviors like shells spawned inside containers, privileged container creation, and unexpected outbound connections.
In 7 listsDetails
Istio
Open-source service mesh for Kubernetes providing traffic control, security, monitoring, and policy enforcement through sidecar proxies (Envoy) that intercept and manage all incoming and outgoing service traffic.
In 6 listsDetails
Tracee
A runtime security and forensics tool for Linux which uses eBPF technology to trace the system and applications at runtime, and analyze collected events to detect suspicious behavioral patterns.
In 6 listsDetails
aquasecurity/kube-bench
Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark, identifying configuration weaknesses in cluster components.
In 6 listsDetails
Tetragon
eBPF-based runtime security tool from Isovalent (now part of Cilium) that enforces policy in-kernel with near-zero overhead, capable of blocking malicious processes outright rather than just alerting on them.
In 5 listsDetails
CDK
Zero-dependency container penetration toolkit designed for stable exploitation in slimmed containers without OS dependencies, featuring container escape PoCs for capabilities like CAP_DAC_READ_SEARCH and CAP_SYS_MODULE.
In 4 lists