Kubernetes Security Benchmark

10 automated checks across 5 domains — pod security, RBAC, network policies, secrets, and image management. Each check mapped to CIS Kubernetes Benchmark and NIST CSF 2.0.

Architecture

flowchart LR
    K8S["K8s Resources\nPods · RBAC · NetworkPolicy\nSecrets · Images"]
    BENCH["checks.py\n10 checks · 5 domains"]
    OUT["JSON / Console"]

    K8S --> BENCH --> OUT

    style K8S fill:#1e293b,stroke:#475569,color:#e2e8f0
    style BENCH fill:#164e63,stroke:#22d3ee,color:#e2e8f0