K8Guard alternatives

Looking for an alternative tool to replace K8Guard? During the review of K8Guard we looked at other open source tools. Based on their category, tags, and text, these are the ones that have the best match.

Top 3

  1. kubeaudit (Kubernetes security scanner)
  2. Kube-Bench (security benchmark testing for Kubernetes)
  3. addrwatch (monitoring of ARP and IP addresses)

These tools are ranked as the best alternatives to K8Guard.

Alternatives (by score)

84

kubeaudit

Introduction

Kubeaudit is a command line tool to audit Kubernetes clusters. It helps to test on various security risks, that may be introduced during deployment.

Project details

kubeaudit is written in Golang.

Strengths and weaknesses

  • + More than 10 contributors
  • + The source code of this software is available
  • + Supported by a large company

    Typical usage

    • Configuration audit
    • Security awareness

    kubeaudit review

    85

    Kube-Bench

    Introduction

    Tools like Kube-Bench help with quickly checking configuration weaknesses or discovering bad defaults.

    Project details

    Kube-Bench is written in Golang.

    Strengths and weaknesses

    • + The source code of this software is available

      Kube-Bench review

      60

      addrwatch

      Introduction

      Similar to arpwatch, this tool addrwatch will monitor the pairing between ethernet and IP addresses.

      Main features:

      • IPv4 and IPv6 address monitoring
      • Monitoring multiple network interfaces with one daemon
      • Monitoring of VLAN tagged (802.1Q) packets
      • Output to stdout, plain text files, syslog, sqlite3, MySQL
      • IP address usage history preserving output and logging

      Project details

      68

      Certigo

      Introduction

      This toolkit is useful for automatic auditing certificates and retrieving information from them. It can be used for monitoring certificates. These certificates could be stored in a local file or remotely on a system. In the latter case, the tool will be able to connect to the system and retrieve the related information.

      Project details

      Certigo is written in Golang.

      Strengths and weaknesses

      • + The source code of this software is available

        Typical usage

        • Certificate management

        Certigo review

        60

        USB Canary

        Introduction

        USB Canary is a tool to monitor the addition or removal of USB devices while a computer is locked. This small utility is written in Python and can provide an alert.

        Project details

        USB Canary is written in Python.

        Strengths and weaknesses

        • + More than 500 GitHub stars
        • + The source code of this software is available
        • - Full name of author is unknown

        Typical usage

        • Hardware security
        • System monitoring

        USB Canary review

        Some relevant tool missing as an alternative to K8Guard? Please contact us with your suggestion.