Securing Kubernetes with m9sweeper
summary
Claims that 80% of clusters have at least one misconfiguration, 60% of incidents stem from deployments, and 70% of container images contain vulnerabilities, then shows a working product that combines common scanners and policy tools into one dashboard. m9sweeper integrates kube-bench, kube-hunter, trivy (and Snyk style image scans), gatekeeper/kyverno, Falco and kubesec across multiple clusters, runs scheduled or on-demand audits, and exports CSV/visual reports. Installation and upgrades use a single Helm install and the demo displays live scans, policy violations, and downloadable remediation reports.
AI-written summary · about
chapters (16)
- 0:00Kubernetes security challenges
- 1:51Security in cloud-native
- 3:17Kubernetes misconfigurations
- 5:04Existing security tools
- 9:02Limitations of multiple tools
- 9:45m9sweeper unified solution
- 11:11m9sweeper Helm chart demo
- 12:16m9sweeper dashboard features
- 13:20Gatekeeper policy enforcement
- 13:42kube-bench kube-score scanning
- 14:43kube-hunter penetration testing
- 15:47Falco intrusion monitoring
- 16:51Security reports analysis
- 17:55Vulnerability tracking
- 18:16User and org settings
- 21:58Q&A Falco logs
related talks
32mStrengthening Kubernetes Security
47mM9sweeper, the Open Source Kubernetes Security Platform
30mA secure journey on Kubernetes
27mSurviving Day2 : Picking the Right Tool To Secure Your Kubernetes Habitat
23mWhat We've Learned from Scanning 10K+ Kubernetes Clusters
19mKubernetes Security: Navigating the Real-World Challenges
18mWhat We've Learned from Scanning 10K+ Kubernetes Clusters
30mWhat We've Learned from Scanning 10K+ Kubernetes Clusters - Gal Gibli