Skip to content
Selected work

Kubernetes security

kube-explor3r: a Kubernetes security assessment framework

A framework and tool that finds privileged workloads, unsafe capabilities, vulnerable packages, and container escape paths — and keeps watching.

AI Platform Security Engineer · ISS STOXX · details generalised; specifics stay internal

The problem

Cluster owners rarely know which workloads run as root, hold dangerous capabilities, or sit one misconfiguration away from the host.

The approach

  1. 01Assessed clusters, pods, Linux packages, and container escape paths in one pass.
  2. 02Flagged privileged workloads, unsafe capabilities, and default root execution with remediation guidance.
  3. 03Stored findings for continuous monitoring, so drift shows up as a change rather than a surprise.

The outcome

Cluster owners got a repeatable way to find and fix misconfigurations, with history to show the trend.

Stack

Kubernetes · Pod security · Package scanning · Container escape analysis