# Kubescape

> Kubescape is an open-source Kubernetes security platform designed to provide practical, end-to-end security for Kubernetes environments.

## Documentation

- [Home](https://kubescape.io/index.md)
- [Documentation overview](https://kubescape.io/docs/index.md)
- [Accepting risk](https://kubescape.io/docs/accepting-risk/index.md)
- [Architecture](https://kubescape.io/docs/architecture/index.md)
- [Building](https://kubescape.io/docs/building/index.md)
- [Customizing your scans](https://kubescape.io/docs/customizing-your-scans/index.md)
- [Scanning a fleet of clusters](https://kubescape.io/docs/fleet-scanning/index.md)
- [Getting Started](https://kubescape.io/docs/getting-started/index.md)
- [Glossary](https://kubescape.io/docs/glossary/index.md)
- [Installing the client](https://kubescape.io/docs/install-cli/index.md)
- [Installing in your cluster](https://kubescape.io/docs/install-operator/index.md)
- [Kubescape Operator vs CLI: Comparison and Functionality](https://kubescape.io/docs/kubescape-operator-vs-cli-comparison/index.md)
- [MCP Server](https://kubescape.io/docs/mcp-server/index.md)
- [Connecting to providers](https://kubescape.io/docs/providers/index.md)
- [Scanning your environment](https://kubescape.io/docs/scanning/index.md)
- [Index](https://kubescape.io/docs/components/index.md)
- [Host Sensor](https://kubescape.io/docs/components/host-sensor/index.md)
- [Control library](https://kubescape.io/docs/controls/index.md)
- [C-0001 - Forbidden Container Registries](https://kubescape.io/docs/controls/c-0001/index.md)
- [C-0002 - Prevent containers from allowing command execution](https://kubescape.io/docs/controls/c-0002/index.md)
- [C-0004 - Resources memory limit and request](https://kubescape.io/docs/controls/c-0004/index.md)
- [C-0005 - API server insecure port is enabled](https://kubescape.io/docs/controls/c-0005/index.md)
- [C-0007 - Roles with delete capabilities](https://kubescape.io/docs/controls/c-0007/index.md)
- [C 0009](https://kubescape.io/docs/controls/c-0009/index.md)
- [C-0012 - Applications credentials in configuration files](https://kubescape.io/docs/controls/c-0012/index.md)
- [C 0013](https://kubescape.io/docs/controls/c-0013/index.md)
- [C 0014](https://kubescape.io/docs/controls/c-0014/index.md)
- [C 0015](https://kubescape.io/docs/controls/c-0015/index.md)
- [C 0016](https://kubescape.io/docs/controls/c-0016/index.md)
- [C 0017](https://kubescape.io/docs/controls/c-0017/index.md)
- [C-0018 - Configured readiness probe](https://kubescape.io/docs/controls/c-0018/index.md)
- [C-0020 - Mount service principal](https://kubescape.io/docs/controls/c-0020/index.md)
- [C 0021](https://kubescape.io/docs/controls/c-0021/index.md)
- [C 0026](https://kubescape.io/docs/controls/c-0026/index.md)
- [C 0030](https://kubescape.io/docs/controls/c-0030/index.md)
- [C-0031 - Delete Kubernetes events](https://kubescape.io/docs/controls/c-0031/index.md)
- [C 0034](https://kubescape.io/docs/controls/c-0034/index.md)
- [C-0035 - Administrative Roles](https://kubescape.io/docs/controls/c-0035/index.md)
- [C 0036](https://kubescape.io/docs/controls/c-0036/index.md)
- [C 0037](https://kubescape.io/docs/controls/c-0037/index.md)
- [C 0038](https://kubescape.io/docs/controls/c-0038/index.md)
- [C 0039](https://kubescape.io/docs/controls/c-0039/index.md)
- [C 0041](https://kubescape.io/docs/controls/c-0041/index.md)
- [C 0042](https://kubescape.io/docs/controls/c-0042/index.md)
- [C 0044](https://kubescape.io/docs/controls/c-0044/index.md)
- [C 0045](https://kubescape.io/docs/controls/c-0045/index.md)
- [C 0046](https://kubescape.io/docs/controls/c-0046/index.md)
- [C 0048](https://kubescape.io/docs/controls/c-0048/index.md)
- [C 0049](https://kubescape.io/docs/controls/c-0049/index.md)
- [C-0050 - Resources CPU limit and request](https://kubescape.io/docs/controls/c-0050/index.md)
- [C-0052 - Instance Metadata API](https://kubescape.io/docs/controls/c-0052/index.md)
- [C 0053](https://kubescape.io/docs/controls/c-0053/index.md)
- [C 0054](https://kubescape.io/docs/controls/c-0054/index.md)
- [C 0055](https://kubescape.io/docs/controls/c-0055/index.md)
- [C 0056](https://kubescape.io/docs/controls/c-0056/index.md)
- [C 0057](https://kubescape.io/docs/controls/c-0057/index.md)
- [C 0058](https://kubescape.io/docs/controls/c-0058/index.md)
- [C 0059](https://kubescape.io/docs/controls/c-0059/index.md)
- [C-0061 - Pods in default namespace](https://kubescape.io/docs/controls/c-0061/index.md)
- [C 0062](https://kubescape.io/docs/controls/c-0062/index.md)
- [C-0063 - Portforwarding privileges](https://kubescape.io/docs/controls/c-0063/index.md)
- [C 0065](https://kubescape.io/docs/controls/c-0065/index.md)
- [C-0066 - Secret/etcd encryption enabled](https://kubescape.io/docs/controls/c-0066/index.md)
- [C-0067 - Audit logs enabled](https://kubescape.io/docs/controls/c-0067/index.md)
- [C-0068 - PSP enabled](https://kubescape.io/docs/controls/c-0068/index.md)
- [C 0069](https://kubescape.io/docs/controls/c-0069/index.md)
- [C-0070 - Enforce Kubelet client TLS authentication](https://kubescape.io/docs/controls/c-0070/index.md)
- [C 0073](https://kubescape.io/docs/controls/c-0073/index.md)
- [C 0074](https://kubescape.io/docs/controls/c-0074/index.md)
- [C-0075 - Image pull policy on latest tag](https://kubescape.io/docs/controls/c-0075/index.md)
- [C 0076](https://kubescape.io/docs/controls/c-0076/index.md)
- [C-0077 - K8s common labels usage](https://kubescape.io/docs/controls/c-0077/index.md)
- [C 0078](https://kubescape.io/docs/controls/c-0078/index.md)
- [C-0079 - CVE-2022-0185-linux-kernel-container-escape](https://kubescape.io/docs/controls/c-0079/index.md)
- [C 0081](https://kubescape.io/docs/controls/c-0081/index.md)
- [C 0083](https://kubescape.io/docs/controls/c-0083/index.md)
- [C 0084](https://kubescape.io/docs/controls/c-0084/index.md)
- [C 0085](https://kubescape.io/docs/controls/c-0085/index.md)
- [C 0087](https://kubescape.io/docs/controls/c-0087/index.md)
- [C-0088 - RBAC enabled](https://kubescape.io/docs/controls/c-0088/index.md)
- [C 0089](https://kubescape.io/docs/controls/c-0089/index.md)
- [C 0090](https://kubescape.io/docs/controls/c-0090/index.md)
- [C 0091](https://kubescape.io/docs/controls/c-0091/index.md)
- [C-0092 - Ensure that the API server pod specification file permissions are set to 600 or more restrictive](https://kubescape.io/docs/controls/c-0092/index.md)
- [C 0093](https://kubescape.io/docs/controls/c-0093/index.md)
- [C 0094](https://kubescape.io/docs/controls/c-0094/index.md)
- [C 0095](https://kubescape.io/docs/controls/c-0095/index.md)
- [C-0096 - Ensure that the scheduler pod specification file permissions are set to 600 or more restrictive](https://kubescape.io/docs/controls/c-0096/index.md)
- [C 0097](https://kubescape.io/docs/controls/c-0097/index.md)
- [C 0098](https://kubescape.io/docs/controls/c-0098/index.md)
- [C 0099](https://kubescape.io/docs/controls/c-0099/index.md)
- [C 0100](https://kubescape.io/docs/controls/c-0100/index.md)
- [C 0101](https://kubescape.io/docs/controls/c-0101/index.md)
- [C-0102 - Ensure that the etcd data directory permissions are set to 700 or more restrictive](https://kubescape.io/docs/controls/c-0102/index.md)
- [C 0103](https://kubescape.io/docs/controls/c-0103/index.md)
- [C 0104](https://kubescape.io/docs/controls/c-0104/index.md)
- [C 0105](https://kubescape.io/docs/controls/c-0105/index.md)
- [C 0106](https://kubescape.io/docs/controls/c-0106/index.md)
- [C 0107](https://kubescape.io/docs/controls/c-0107/index.md)
- [C-0108 - Ensure that the controller-manager.conf file permissions are set to 600 or more restrictive](https://kubescape.io/docs/controls/c-0108/index.md)
- [C 0109](https://kubescape.io/docs/controls/c-0109/index.md)
- [C-0110 - Ensure that the Kubernetes PKI directory and file ownership is set to root:root](https://kubescape.io/docs/controls/c-0110/index.md)
- [C 0111](https://kubescape.io/docs/controls/c-0111/index.md)
- [C 0112](https://kubescape.io/docs/controls/c-0112/index.md)
- [C 0113](https://kubescape.io/docs/controls/c-0113/index.md)
- [C 0114](https://kubescape.io/docs/controls/c-0114/index.md)
- [C 0115](https://kubescape.io/docs/controls/c-0115/index.md)
- [C 0116](https://kubescape.io/docs/controls/c-0116/index.md)
- [C 0117](https://kubescape.io/docs/controls/c-0117/index.md)
- [C 0118](https://kubescape.io/docs/controls/c-0118/index.md)
- [C 0119](https://kubescape.io/docs/controls/c-0119/index.md)
- [C 0120](https://kubescape.io/docs/controls/c-0120/index.md)
- [C 0121](https://kubescape.io/docs/controls/c-0121/index.md)
- [C 0122](https://kubescape.io/docs/controls/c-0122/index.md)
- [C 0123](https://kubescape.io/docs/controls/c-0123/index.md)
- [C 0124](https://kubescape.io/docs/controls/c-0124/index.md)
- [C 0125](https://kubescape.io/docs/controls/c-0125/index.md)
- [C 0126](https://kubescape.io/docs/controls/c-0126/index.md)
- [C 0127](https://kubescape.io/docs/controls/c-0127/index.md)
- [C 0128](https://kubescape.io/docs/controls/c-0128/index.md)
- [C 0129](https://kubescape.io/docs/controls/c-0129/index.md)
- [C 0130](https://kubescape.io/docs/controls/c-0130/index.md)
- [C 0131](https://kubescape.io/docs/controls/c-0131/index.md)
- [C 0132](https://kubescape.io/docs/controls/c-0132/index.md)
- [C-0133 - Ensure that the API Server --audit-log-maxsize argument is set to 100 or as appropriate](https://kubescape.io/docs/controls/c-0133/index.md)
- [C 0134](https://kubescape.io/docs/controls/c-0134/index.md)
- [C 0135](https://kubescape.io/docs/controls/c-0135/index.md)
- [C 0136](https://kubescape.io/docs/controls/c-0136/index.md)
- [C-0137 - Ensure that the API Server --etcd-certfile and --etcd-keyfile arguments are set as appropriate](https://kubescape.io/docs/controls/c-0137/index.md)
- [C 0138](https://kubescape.io/docs/controls/c-0138/index.md)
- [C 0139](https://kubescape.io/docs/controls/c-0139/index.md)
- [C 0140](https://kubescape.io/docs/controls/c-0140/index.md)
- [C-0141 - Ensure that the API Server --encryption-provider-config argument is set as appropriate](https://kubescape.io/docs/controls/c-0141/index.md)
- [C 0142](https://kubescape.io/docs/controls/c-0142/index.md)
- [C 0143](https://kubescape.io/docs/controls/c-0143/index.md)
- [C 0144](https://kubescape.io/docs/controls/c-0144/index.md)
- [C 0145](https://kubescape.io/docs/controls/c-0145/index.md)
- [C 0146](https://kubescape.io/docs/controls/c-0146/index.md)
- [C 0147](https://kubescape.io/docs/controls/c-0147/index.md)
- [C 0148](https://kubescape.io/docs/controls/c-0148/index.md)
- [C 0149](https://kubescape.io/docs/controls/c-0149/index.md)
- [C 0150](https://kubescape.io/docs/controls/c-0150/index.md)
- [C 0151](https://kubescape.io/docs/controls/c-0151/index.md)
- [C 0152](https://kubescape.io/docs/controls/c-0152/index.md)
- [C 0153](https://kubescape.io/docs/controls/c-0153/index.md)
- [C 0154](https://kubescape.io/docs/controls/c-0154/index.md)
- [C 0155](https://kubescape.io/docs/controls/c-0155/index.md)
- [C 0156](https://kubescape.io/docs/controls/c-0156/index.md)
- [C 0157](https://kubescape.io/docs/controls/c-0157/index.md)
- [C 0158](https://kubescape.io/docs/controls/c-0158/index.md)
- [C 0159](https://kubescape.io/docs/controls/c-0159/index.md)
- [C 0160](https://kubescape.io/docs/controls/c-0160/index.md)
- [C 0161](https://kubescape.io/docs/controls/c-0161/index.md)
- [C-0162 - Ensure that the kubelet service file permissions are set to 600 or more restrictive](https://kubescape.io/docs/controls/c-0162/index.md)
- [C 0163](https://kubescape.io/docs/controls/c-0163/index.md)
- [C 0164](https://kubescape.io/docs/controls/c-0164/index.md)
- [C-0165 - If proxy kubeconfig file exists ensure ownership is set to root:root](https://kubescape.io/docs/controls/c-0165/index.md)
- [C 0166](https://kubescape.io/docs/controls/c-0166/index.md)
- [C-0167 - Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root](https://kubescape.io/docs/controls/c-0167/index.md)
- [C-0168 - Ensure that the certificate authorities file permissions are set to 600 or more restrictive](https://kubescape.io/docs/controls/c-0168/index.md)
- [C-0169 - Ensure that the client certificate authorities file ownership is set to root:root](https://kubescape.io/docs/controls/c-0169/index.md)
- [C 0170](https://kubescape.io/docs/controls/c-0170/index.md)
- [C 0171](https://kubescape.io/docs/controls/c-0171/index.md)
- [C-0172 - Ensure that the --anonymous-auth argument is set to false](https://kubescape.io/docs/controls/c-0172/index.md)
- [C-0173 - Ensure that the --authorization-mode argument is not set to AlwaysAllow](https://kubescape.io/docs/controls/c-0173/index.md)
- [C-0174 - Ensure that the --client-ca-file argument is set as appropriate](https://kubescape.io/docs/controls/c-0174/index.md)
- [C 0175](https://kubescape.io/docs/controls/c-0175/index.md)
- [C 0176](https://kubescape.io/docs/controls/c-0176/index.md)
- [C 0177](https://kubescape.io/docs/controls/c-0177/index.md)
- [C 0178](https://kubescape.io/docs/controls/c-0178/index.md)
- [C 0179](https://kubescape.io/docs/controls/c-0179/index.md)
- [C-0180 - Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture](https://kubescape.io/docs/controls/c-0180/index.md)
- [C 0181](https://kubescape.io/docs/controls/c-0181/index.md)
- [C 0182](https://kubescape.io/docs/controls/c-0182/index.md)
- [C 0183](https://kubescape.io/docs/controls/c-0183/index.md)
- [C 0184](https://kubescape.io/docs/controls/c-0184/index.md)
- [C 0185](https://kubescape.io/docs/controls/c-0185/index.md)
- [C 0186](https://kubescape.io/docs/controls/c-0186/index.md)
- [C 0187](https://kubescape.io/docs/controls/c-0187/index.md)
- [C 0188](https://kubescape.io/docs/controls/c-0188/index.md)
- [C 0189](https://kubescape.io/docs/controls/c-0189/index.md)
- [C 0190](https://kubescape.io/docs/controls/c-0190/index.md)
- [C 0191](https://kubescape.io/docs/controls/c-0191/index.md)
- [C 0192](https://kubescape.io/docs/controls/c-0192/index.md)
- [C 0193](https://kubescape.io/docs/controls/c-0193/index.md)
- [C 0194](https://kubescape.io/docs/controls/c-0194/index.md)
- [C 0195](https://kubescape.io/docs/controls/c-0195/index.md)
- [C 0196](https://kubescape.io/docs/controls/c-0196/index.md)
- [C 0197](https://kubescape.io/docs/controls/c-0197/index.md)
- [C 0198](https://kubescape.io/docs/controls/c-0198/index.md)
- [C 0199](https://kubescape.io/docs/controls/c-0199/index.md)
- [C 0200](https://kubescape.io/docs/controls/c-0200/index.md)
- [C 0201](https://kubescape.io/docs/controls/c-0201/index.md)
- [C 0202](https://kubescape.io/docs/controls/c-0202/index.md)
- [C 0203](https://kubescape.io/docs/controls/c-0203/index.md)
- [C 0204](https://kubescape.io/docs/controls/c-0204/index.md)
- [C-0205 - Ensure that the CNI in use supports Network Policies](https://kubescape.io/docs/controls/c-0205/index.md)
- [C 0206](https://kubescape.io/docs/controls/c-0206/index.md)
- [C 0207](https://kubescape.io/docs/controls/c-0207/index.md)
- [C-0208 - Consider external secret storage](https://kubescape.io/docs/controls/c-0208/index.md)
- [C 0209](https://kubescape.io/docs/controls/c-0209/index.md)
- [C 0210](https://kubescape.io/docs/controls/c-0210/index.md)
- [C 0211](https://kubescape.io/docs/controls/c-0211/index.md)
- [C 0212](https://kubescape.io/docs/controls/c-0212/index.md)
- [C 0213](https://kubescape.io/docs/controls/c-0213/index.md)
- [C 0214](https://kubescape.io/docs/controls/c-0214/index.md)
- [C 0215](https://kubescape.io/docs/controls/c-0215/index.md)
- [C 0216](https://kubescape.io/docs/controls/c-0216/index.md)
- [C 0217](https://kubescape.io/docs/controls/c-0217/index.md)
- [C 0218](https://kubescape.io/docs/controls/c-0218/index.md)
- [C 0219](https://kubescape.io/docs/controls/c-0219/index.md)
- [C 0220](https://kubescape.io/docs/controls/c-0220/index.md)
- [C-0221 - Ensure Image Vulnerability Scanning using Amazon ECR image scanning or a third party provider](https://kubescape.io/docs/controls/c-0221/index.md)
- [C-0222 - Minimize user access to Amazon ECR](https://kubescape.io/docs/controls/c-0222/index.md)
- [C-0223 - Minimize cluster access to read-only for Amazon ECR](https://kubescape.io/docs/controls/c-0223/index.md)
- [C 0225](https://kubescape.io/docs/controls/c-0225/index.md)
- [C-0226 - Prefer using a container-optimized OS when possible](https://kubescape.io/docs/controls/c-0226/index.md)
- [C-0227 - Restrict Access to the Control Plane Endpoint](https://kubescape.io/docs/controls/c-0227/index.md)
- [C-0228 - Ensure clusters are created with Private Endpoint Enabled and Public Access Disabled](https://kubescape.io/docs/controls/c-0228/index.md)
- [C-0229 - Ensure clusters are created with Private Nodes](https://kubescape.io/docs/controls/c-0229/index.md)
- [C-0230 - Ensure Network Policy is Enabled and set as appropriate](https://kubescape.io/docs/controls/c-0230/index.md)
- [C-0231 - Encrypt traffic to HTTPS load balancers with TLS certificates](https://kubescape.io/docs/controls/c-0231/index.md)
- [C-0232 - Manage Kubernetes RBAC users with AWS IAM Authenticator for Kubernetes or Upgrade to AWS CLI v1.16.156](https://kubescape.io/docs/controls/c-0232/index.md)
- [C 0233](https://kubescape.io/docs/controls/c-0233/index.md)
- [C 0234](https://kubescape.io/docs/controls/c-0234/index.md)
- [C 0235](https://kubescape.io/docs/controls/c-0235/index.md)
- [C 0236](https://kubescape.io/docs/controls/c-0236/index.md)
- [C 0237](https://kubescape.io/docs/controls/c-0237/index.md)
- [C-0238 - Ensure that the kubeconfig file permissions are set to 644 or more restrictive](https://kubescape.io/docs/controls/c-0238/index.md)
- [C 0239](https://kubescape.io/docs/controls/c-0239/index.md)
- [C-0240 - Ensure Network Policy is Enabled and set as appropriate](https://kubescape.io/docs/controls/c-0240/index.md)
- [C-0241 - Use Azure RBAC for Kubernetes Authorization.](https://kubescape.io/docs/controls/c-0241/index.md)
- [C 0242](https://kubescape.io/docs/controls/c-0242/index.md)
- [C-0243 - Ensure Image Vulnerability Scanning using Azure Defender image scanning or a third party provider](https://kubescape.io/docs/controls/c-0243/index.md)
- [C-0244 - Ensure Kubernetes Secrets are encrypted](https://kubescape.io/docs/controls/c-0244/index.md)
- [C-0245 - Encrypt traffic to HTTPS load balancers with TLS certificates](https://kubescape.io/docs/controls/c-0245/index.md)
- [C 0246](https://kubescape.io/docs/controls/c-0246/index.md)
- [C 0247](https://kubescape.io/docs/controls/c-0247/index.md)
- [C-0248 - Ensure clusters are created with Private Nodes](https://kubescape.io/docs/controls/c-0248/index.md)
- [C-0249 - Restrict untrusted workloads](https://kubescape.io/docs/controls/c-0249/index.md)
- [C-0250 - Minimize cluster access to read-only for Azure Container Registry (ACR)](https://kubescape.io/docs/controls/c-0250/index.md)
- [C-0251 - Minimize user access to Azure Container Registry (ACR)](https://kubescape.io/docs/controls/c-0251/index.md)
- [C-0252 - Ensure clusters are created with Private Endpoint Enabled and Public Access Disabled](https://kubescape.io/docs/controls/c-0252/index.md)
- [C 0253](https://kubescape.io/docs/controls/c-0253/index.md)
- [C-0254 - Enable audit Logs](https://kubescape.io/docs/controls/c-0254/index.md)
- [C 0255](https://kubescape.io/docs/controls/c-0255/index.md)
- [C 0256](https://kubescape.io/docs/controls/c-0256/index.md)
- [C 0257](https://kubescape.io/docs/controls/c-0257/index.md)
- [C 0258](https://kubescape.io/docs/controls/c-0258/index.md)
- [C 0259](https://kubescape.io/docs/controls/c-0259/index.md)
- [C 0260](https://kubescape.io/docs/controls/c-0260/index.md)
- [C 0261](https://kubescape.io/docs/controls/c-0261/index.md)
- [C 0262](https://kubescape.io/docs/controls/c-0262/index.md)
- [C 0263](https://kubescape.io/docs/controls/c-0263/index.md)
- [C 0264](https://kubescape.io/docs/controls/c-0264/index.md)
- [C 0265](https://kubescape.io/docs/controls/c-0265/index.md)
- [C 0266](https://kubescape.io/docs/controls/c-0266/index.md)
- [C 0267](https://kubescape.io/docs/controls/c-0267/index.md)
- [C 0268](https://kubescape.io/docs/controls/c-0268/index.md)
- [C 0269](https://kubescape.io/docs/controls/c-0269/index.md)
- [C 0270](https://kubescape.io/docs/controls/c-0270/index.md)
- [C 0271](https://kubescape.io/docs/controls/c-0271/index.md)
- [C 0272](https://kubescape.io/docs/controls/c-0272/index.md)
- [C 0273](https://kubescape.io/docs/controls/c-0273/index.md)
- [C-0274 - Verify Authenticated Service](https://kubescape.io/docs/controls/c-0274/index.md)
- [C 0275](https://kubescape.io/docs/controls/c-0275/index.md)
- [C 0276](https://kubescape.io/docs/controls/c-0276/index.md)
- [C 0277](https://kubescape.io/docs/controls/c-0277/index.md)
- [C 0278](https://kubescape.io/docs/controls/c-0278/index.md)
- [C 0279](https://kubescape.io/docs/controls/c-0279/index.md)
- [C 0280](https://kubescape.io/docs/controls/c-0280/index.md)
- [C 0281](https://kubescape.io/docs/controls/c-0281/index.md)
- [C 0282](https://kubescape.io/docs/controls/c-0282/index.md)
- [C 0283](https://kubescape.io/docs/controls/c-0283/index.md)
- [C 0284](https://kubescape.io/docs/controls/c-0284/index.md)
- [Overview](https://kubescape.io/docs/frameworks-and-controls/index.md)
- [Configuring controls](https://kubescape.io/docs/frameworks-and-controls/configuring-controls/index.md)
- [Frameworks](https://kubescape.io/docs/frameworks-and-controls/frameworks/index.md)
- [Use Kubescape to configure a validating admission policy](https://kubescape.io/docs/frameworks-and-controls/validating-admission-policy/index.md)
- [Deploying on OpenShift](https://kubescape.io/docs/guides/deploying-on-openshift/index.md)
- [Monitoring vulnerabilities across your cluster](https://kubescape.io/docs/guides/vulnerability-monitoring/index.md)
- [Harden a cluster](https://kubescape.io/docs/guides/kubescape-cli/index.md)
- [Kubescape for teenagers](https://kubescape.io/docs/guides/kubescape-for-teenagers/kubescape-for-teenagers/index.md)
- [Configure checks on a GitHub repository](https://kubescape.io/docs/guides/kubescape-gha/index.md)
- [Overview](https://kubescape.io/docs/integrations/index.md)
- [GitHub](https://kubescape.io/docs/integrations/github/index.md)
- [GitLab CI/CD](https://kubescape.io/docs/integrations/gitlab/index.md)
- [Configuring cloud providers](https://kubescape.io/docs/integrations/kubescape-integration-with-cloud-providers/index.md)
- [Lens](https://kubescape.io/docs/integrations/lens/index.md)
- [VS Code](https://kubescape.io/docs/integrations/vscode/index.md)
- [Index](https://kubescape.io/docs/integrations/kubescape-integration-with-cloud-providers/index.md)
- [Amazon Elastic Kubernetes Service integration](https://kubescape.io/docs/integrations/kubescape-integration-with-cloud-providers/amazon-web-services-integration/index.md)
- [Azure Kubernetes Service integration](https://kubescape.io/docs/integrations/kubescape-integration-with-cloud-providers/azure-aks/index.md)
- [Google Cloud Services integration](https://kubescape.io/docs/integrations/kubescape-integration-with-cloud-providers/google-cloud-services-integration/index.md)
- [Running ARMO/Kubescape Node Agents on GKE Autopilot Clusters](https://kubescape.io/docs/integrations/kubescape-integration-with-cloud-providers/running-armokubescape-node-agents-on-gke-autopilot-clusters/index.md)
- [Overview](https://kubescape.io/docs/operator/index.md)
- [Automatic upgrades](https://kubescape.io/docs/operator/automatic-release-upgrades/index.md)
- [Continuous scanning](https://kubescape.io/docs/operator/continuous-scanning/index.md)
- [VEX document generation (experimental)](https://kubescape.io/docs/operator/generating-vex/index.md)
- [Node Agents per Node Pool](https://kubescape.io/docs/operator/multiple-node-agent-per-node-pool/index.md)
- [Generate Network Policies](https://kubescape.io/docs/operator/network-policy-generation/index.md)
- [Node Agent Rule Library](https://kubescape.io/docs/operator/node-agent-rule-library/index.md)
- [Prometheus Integrations](https://kubescape.io/docs/operator/prometheus-integration/index.md)
- [Relevancy](https://kubescape.io/docs/operator/relevancy/index.md)
- [Runtime Threat Detection](https://kubescape.io/docs/operator/runtime-threat-detection/index.md)
- [How to Route Kubescape Threat Detection Alerts to Graylog Using HTTP Raw Input](https://kubescape.io/docs/operator/runtime-threat-routing-to-graylog/index.md)
- [Scheduled scans](https://kubescape.io/docs/operator/scheduled-scans/index.md)
- [Telemetry](https://kubescape.io/docs/operator/telemetry/index.md)
- [UI with Headlamp](https://kubescape.io/docs/operator/ui-with-headlamp/index.md)
- [Vulnerability scanning](https://kubescape.io/docs/operator/vulnerabilities/index.md)
- [Vulnerability exceptions](https://kubescape.io/docs/operator/vulnerability-exceptions/index.md)
- [What is a Bill of Behavior](https://kubescape.io/docs/operator/bill-of-behavior/index.md)
- [Profile size & performance](https://kubescape.io/docs/operator/bill-of-behavior/profile-size-and-performance/index.md)
- [Quickstart](https://kubescape.io/docs/operator/bill-of-behavior/quickstart/index.md)
- [Signing & tamper detection](https://kubescape.io/docs/operator/bill-of-behavior/signing-and-tamper/index.md)

## Project

- [About the Kubescape project](https://kubescape.io/project/about/index.md)
- [Community](https://kubescape.io/project/community/index.md)
- [Contributing](https://kubescape.io/project/contributing/index.md)
- [License](https://kubescape.io/project/license/index.md)
- [Survey](https://kubescape.io/project/survey/index.md)

## Blog

- [Enhancing Bitnami Helm Charts Security: A Kubescape Case Study](https://kubescape.io/blog/2024/07/16/kubescape-study-bitnami-charts/index.md)
- [Kubescape: The 1st Open Source project to support VEX Generation](https://kubescape.io/blog/2023/12/07/kubescape-support-for-vex-generation/index.md)
- [CEL and Kubescape: Transforming Kubernetes Admission Control](https://kubescape.io/blog/2024/08/04/cel-and-kubescape/index.md)
- [Introducing Kubescape 3.0](https://kubescape.io/blog/2023/09/19/introducing-kubescape-3/index.md)
- [Kubescape 3.0: The Capabilties System & Continuous Scanning](https://kubescape.io/blog/2023/11/06/kubescape-3-capablities-continuous-scanning/index.md)
- [Kubescape 3.0: CLI improvements](https://kubescape.io/blog/2023/10/01/kubescape-3-cli-improvements/index.md)
- [Patching Image Vulnerabilities with Kubescape & Copa](https://kubescape.io/blog/2024/07/14/kubescape-3-image-patching/index.md)
- [Kubescape 3.0: Introducing Image Scanning](https://kubescape.io/blog/2023/10/12/kubescape-3-image-scanning/index.md)
- [Kubescape 3.0: Introducing Workload Scanning](https://kubescape.io/blog/2023/10/23/kubescape-3-workload-scanning/index.md)
- [Integrating Kubescape into Your CI/CD Pipeline](https://kubescape.io/blog/2026/06/09/kubescape-cicd-integrations/index.md)
- [Kubescape Now Supports CIS Kubernetes Benchmark v1.10](https://kubescape.io/blog/2025/03/06/kubescape-cis-10/index.md)
- [Kubescape Node Agent Now Works on GKE Autopilot Clusters](https://kubescape.io/blog/2025/05/15/kubescape-gke-autopilot/index.md)
- [Introducing a Visual Way to Explore Kubernetes Security: the Kubescape Plugin for Headlamp](https://kubescape.io/blog/2025/04/30/kubescape-headlamp/index.md)
- [Kubescape's Journey to Incubation: Celebrating our Community and a Secure Kubernetes Future](https://kubescape.io/blog/2025/02/25/kubescape-incubation/index.md)
- [Protecting Sensitive Metadata in Kubescape Reports](https://kubescape.io/blog/2026/07/24/kubescape-report-metadata-protection/index.md)
- [Happy second birthday, Kubescape!](https://kubescape.io/blog/2023/09/14/happy-second-birthday-kubescape/index.md)