alperenkesk

alperenkesk / k8scan

Public

An advanced, read-only Kubernetes security scanner for identifying misconfigurations and vulnerabilities.

10
1
100% credibility
Found Mar 03, 2026 at 10 stars -- GitGems finds repos before they trend. Get early access to the next one.
Sign Up Free
AI Analysis
Python
AI Summary

k8scan is a read-only security scanner for Kubernetes clusters that detects misconfigurations, privilege escalations, and exposures, generating actionable reports with proof-of-concept examples.

How It Works

1
🔍 Discover k8scan

You hear about k8scan from a colleague worried about security weak spots in their Kubernetes setup and decide to give it a try.

2
📥 Get it ready

You easily prepare k8scan on your computer so it's all set to check your cluster.

3
🔗 Connect to your cluster

You simply link k8scan to your Kubernetes cluster, and it gets ready to explore safely.

4
🚀 Start the security check

Hit go, and watch the friendly progress bars as k8scan carefully scans for risks without changing anything.

5
📊 See your results

Get a clear overview with color-coded risks, scores, and easy-to-understand attack paths.

6
📄 Create shareable reports

Generate beautiful web reports or data files with step-by-step fixes and proof examples.

✅ Cluster secured

Follow the simple advice to fix issues, share reports securely, and rest easy knowing your setup is safer.

Sign up to see the full architecture

5 more

Sign Up Free

Star Growth

See how this repo grew from 10 to 10 stars Sign Up Free
Repurpose This Repo

Repurpose is a Pro feature

Generate ready-to-use prompts for X threads, LinkedIn posts, blog posts, YouTube scripts, and more -- with full repo context baked in.

Unlock Repurpose
AI-Generated Review

What is k8scan?

k8scan is a Python-based, read-only Kubernetes security scanner that identifies misconfigurations and vulnerabilities like privileged pods, RBAC escalations, exposed services, and leaked secrets. It solves the problem of vague audit reports by generating ready-to-run proof-of-concept exploits, risk scores, and attack paths. Users get terminal output, JSON for CI/CD, and interactive HTML dashboards shareable via a built-in HTTP server.

Why is it gaining traction?

It stands out by translating findings into copy-paste PoC commands demonstrating real impact, unlike basic linters that just flag issues. Production-safe read-only scans with progress bars and category breakdowns make audits fast and non-disruptive. Docker and pip installs plus flags like `--exclude-system` and `--severity CRITICAL` hook DevOps teams needing quick, actionable insights.

Who should use this?

Kubernetes platform engineers auditing clusters for compliance. DevSecOps practitioners adding security gates to GitHub Actions pipelines. Security analysts validating exploits in red-team exercises or penetration tests.

Verdict

Grab it for the killer PoC generation if you're evaluating Kubernetes security tools—early promise in a crowded field. With 10 stars and 1.0% credibility score, it's immature; run on staging clusters first and watch for updates.

(178 words)

Sign up to read the full AI review Sign Up Free

Similar repos coming soon.