K8Guard alternatives

Looking for an alternative tool to replace K8Guard? During the review of K8Guard we looked at other open source tools. Based on their category, tags, and text, these are the ones that have the best match.

Top 3

  1. Kube-Bench (security benchmark testing for Kubernetes)
  2. kubeaudit (Kubernetes security scanner)
  3. Certigo (certificate validator tool)

These tools are ranked as the best alternatives to K8Guard.

Alternatives (by score)

85

Kube-Bench

Introduction

Tools like Kube-Bench help with quickly checking configuration weaknesses or discovering bad defaults.

Project details

Kube-Bench is written in Golang.

Strengths and weaknesses

  • + The source code of this software is available

    Kube-Bench review

    84

    kubeaudit

    Introduction

    Kubeaudit is a command line tool to audit Kubernetes clusters. It helps to test on various security risks, that may be introduced during deployment.

    Project details

    kubeaudit is written in Golang.

    Strengths and weaknesses

    • + More than 10 contributors
    • + The source code of this software is available
    • + Supported by a large company

      Typical usage

      • Configuration audit
      • Security awareness

      kubeaudit review

      60

      Certigo

      Introduction

      This toolkit is useful for automatic auditing certificates and retrieving information from them. It can be used for monitoring certificates. These certificates could be stored in a local file or remotely on a system. In the latter case, the tool will be able to connect to the system and retrieve the related information.

      Project details

      Certigo is written in Golang.

      Strengths and weaknesses

      • + The source code of this software is available

        Typical usage

        • Certificate management

        Certigo review

        60

        USB Canary

        Introduction

        USB Canary is a tool to monitor the addition or removal of USB devices while a computer is locked. This small utility is written in Python and can provide an alert.

        Project details

        USB Canary is written in Python.

        Strengths and weaknesses

        • + More than 500 GitHub stars
        • + The source code of this software is available
        • - Full name of author is unknown

        Typical usage

        • Hardware security
        • System monitoring

        USB Canary review

        60

        addrwatch

        Introduction

        Similar to arpwatch, this tool addrwatch will monitor the pairing between ethernet and IP addresses.

        Main features:

        • IPv4 and IPv6 address monitoring
        • Monitoring multiple network interfaces with one daemon
        • Monitoring of VLAN tagged (802.1Q) packets
        • Output to stdout, plain text files, syslog, sqlite3, MySQL
        • IP address usage history preserving output and logging

        Project details

        Some relevant tool missing as an alternative to K8Guard? Please contact us with your suggestion.