Kube-bench + AppGuard
Checks Kubernetes clusters against CIS Kubernetes Benchmark security recommendations.
What is Kube-bench?
Kube-bench is a tool that checks whether Kubernetes is deployed securely by running the checks documented in the CIS Kubernetes Benchmark. It identifies misconfigurations in your Kubernetes cluster against established security best practices, covering master node, control plane, and worker node configurations.
CIS Kubernetes Benchmark checksMaster, control plane, and worker node coverageAutomated remediation suggestionsJSON and check output formatsRuns as a container or binary
Integrate Kube-bench with AppGuard
1
Run kube-bench
Run kube-bench as a container in your Kubernetes cluster.
docker run --pid=host -v /etc:/node/etc:ro -v /var:/node/var:ro -ti aquasec/kube-bench:latest
2
Export results
Run kube-bench with JSON output.
kube-bench run --json > results.json
3
Push to AppGuard
Send the results to AppGuard.
curl -X POST "$APPGUARD_PUBLIC_URL/api/ingest" \ -H "X-Api-Token: $API_TOKEN" \ -F "[email protected]"
What AppGuard adds to Kube-bench
Cluster-wide view
See Kubernetes compliance alongside application security findings.
Compliance tracking
Track CIS benchmark compliance over time across cluster upgrades.
Unified dashboard
View K8s findings alongside SAST, SCA, and DAST results.