tetragon
Security monitor
A real-time security monitoring system that detects and responds to sensitive events using eBPF-based sensors and enriched with kernel and Kubernetes metadata
eBPF-based Security Observability and Runtime Enforcement
4k stars
53 watching
374 forks
Language: Go
last commit: almost 2 years agoLinked from 3 awesome lists
bpfebpfkernelkubernetessecurity
zoidyzoidzoid/awesome-ebpf
rootsongjc/awesome-cloud-native
jatrost/awesome-kubernetes-threat-detectionRelated projects:
| Repository | Description | Stars |
|---|---|---|
| cilium/cilium | An eBPF-based networking and security solution for Kubernetes clusters | 20,485 |
 aquasecurity/tracee | A tool that uses eBPF to monitor system behavior and detect security threats | 3,657 |
 kubescape/kubescape | A platform that analyzes and secures Kubernetes environments throughout the development and deployment lifecycle | 10,292 |
 zabbix/zabbix | An enterprise-class monitoring solution designed to track performance and availability of IT resources and services in real-time. | 4,484 |
| cilium/hubble | A distributed platform for monitoring and analyzing cloud-native applications in Kubernetes environments | 3,581 |
 kubeshark/kubeshark | An API traffic analyzer specifically designed to visualize Kubernetes internal network traffic in real-time | 11,112 |
| aquasecurity/kube-bench | Automated security auditing tool for Kubernetes clusters | 7,129 |
| aquasecurity/kube-hunter | Detects security weaknesses in Kubernetes clusters to increase awareness and visibility of potential vulnerabilities. | 4,774 |
 zegl/kube-score | Analyzes Kubernetes object definitions for security and reliability issues and provides recommendations for improvement. | 2,813 |
 pulumi/kubespy | Provides real-time monitoring and analysis of Kubernetes resources | 2,896 |
 robusta-dev/robusta | A Kubernetes monitoring tool that adds features to Prometheus alerts such as smart grouping, AI enrichment, and automated remediation. | 2,630 |
 kubernetes/kubernetes | A system for managing containerized applications across multiple hosts | 111,689 |
 getanteon/alaz | A tool that uses eBPF to monitor and analyze Kubernetes service interactions and performance metrics without requiring code instrumentation or sidecars. | 660 |
 freach/kubernetes-security-best-practice | A comprehensive guide to securing Kubernetes clusters in the cloud or on-premises | 2,695 |
 madhuakula/kubernetes-goat | An interactive hands-on playground to learn and practice Kubernetes security using intentionally introduced vulnerabilities | 4,542 |