一个免费的镜像漏洞扫描工具, 可以扫描镜像中已安装软件包的漏洞，支持中文漏洞库，可与 Harbor 无缝集成。

Show who has RBAC permissions to perform actions on different resources in Kubernetes

Forecasting and detecting anomalies in network TCP connections using fbprophet

Deploy-time Policy Enforcer for Kubernetes applications

Simple, scalable and secure application segmentation

Visualize your Kubernetes cluster in real time

Lightweight Kubernetes Firewall to implement NetworkPolicies (and to decouple network & security)

A security monitoring solution for Kubernetes

Create Topology views with SVG and React

Hunt for security weaknesses in Kubernetes clusters

An open source real-time network topology and protocols analyzer

The Kubernetes Bench for Security is a Go application that checks whether Kubernetes is deployed according to security best practices

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

Resources for container security research

HTTP, gRPC, and Kafka Aware Security and Networking for Containers with BPF and XDP

Go wrapper around iptables utility

Sysdig Falco: Behavioral Activity Monitoring With Container Support

快速搭建各种漏洞环境(Various vulnerability environment)

A service that analyzes docker images and applies user-defined acceptance policies to allow automated container image validation and certification

The OWASP ZAP core project

Custom & better AppArmor profile generator for Docker containers.

DockerSlim (docker-slim): Optimize and secure your Docker containers (free and open source)

This folder contains python codes that used to compare between Local Outlier Factor algorithm and One Class Support Vector Machine on detecting outliers in a credit card transactions dataset.

The toolbox of open source scanners - 安全行业从业者自研开源扫描器合辑

Nikto web server scanner

Web Application Security Scanner Framework

A proxy for docker.sock that enforces access control and isolated privileges

Simple patch and update solution for Docker images

Docker PHP development environment.