Kubescape

7.1easy start · #5 of 28
in Cloud Security Platforms

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you workyes

Runs on api, Linux, Mac, self-hosted, Windows.

Kubescape is ranked #5 of 28 in cloud security platforms on The Geeks Club. It runs on API, Linux, macOS, Self-hosted, Windows. There is a free plan.

Kubescape plans and pricing

All plans

Kubescape open source Free Apache 2.0 license · CLI and Kubernetes operator · self-hosted kubescape.io · 30 Sept 2026

ARMO Platform Not published Pricing depends on vCPUs and other cloud resources armosec.io · 30 Sept 2026

Compared on cloud security platforms

Free plan: Yes
Kubernetes security: Yes

Best Kubescape alternatives

See all 12

Prowler Cloud 0 of 4 in the starter kit Lesson 17.7 C3M Cloud Control 0 of 4 in the starter kit Lesson 27.5 Qualys TotalCloud 0 of 4 in the starter kit Lesson 37.5 Armor 0 of 4 in the starter kit Lesson 47.2 CrowdStrike Falcon Surface 0 of 4 in the starter kit Lesson 67.0 Rapid7 Surface Command 0 of 4 in the starter kit Lesson 76.9

The record

Purpose: Kubescape is an open-source Kubernetes security platform for end-to-end security coverage.
Configuration scanning: It analyzes Kubernetes manifests, Helm charts, and live clusters for misconfigurations.
Vulnerability scanning: The operator scans deployed container images for vulnerabilities using Grype and public vulnerability databases.
Compliance: Kubescape supports security frameworks including CIS, NSA-CISA, MITRE ATT&CK, and SOC 2.
Runtime security: Kubescape provides runtime monitoring and detection for suspicious activity and threats in active clusters.
Policy engine: Kubescape uses Open Policy Agent to verify Kubernetes objects against posture controls written in Rego.
Operator: The Kubescape operator runs as microservices that continually monitor a cluster’s security posture.
Integrations: Kubescape provides integrations for GitHub, GitLab CI/CD, Lens, and Visual Studio Code.
Provider: ARMO Platform is the documented compatible provider for uploading scan results and downloading custom artifacts.
Deployment: The CLI supports offline and air-gapped operation by downloading artifacts for local use.
Reports: Scan results can be exported as JSON or JUnit XML and rendered as HTML or PDF.
License: Kubescape is released under the Apache License, Version 2.0.
Support: The project says it aims to respond to issues within 48 hours and provides CNCF Slack users and developers channels.
In-cluster retention: In-cluster scan results are considered ephemeral and are regularly updated and fully regenerable.
Price from: Free

Where it ranks on The Geeks Club

Best Cloud Security Platforms in 2026#5 of 28
Best Security Configuration Management Software in 2026#6 of 26
Best Cloud Vulnerability Scanners in 2026#5 of 24
Best Container Security Software in 2026#4 of 24
Best Kubernetes Security Software in 2026#1 of 24
Best Infrastructure as Code Security Software in 2026#5 of 22

Is Kubescape yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Kubescape

Sources

kubescape.io· checked 30 Sept 2026
kubescape.io/docs/operator/vulnerabilities/· checked 30 Sept 2026
kubescape.io/docs/operator/· checked 30 Sept 2026
kubescape.io/docs/integrations/· checked 30 Sept 2026
kubescape.io/docs/providers/· checked 30 Sept 2026
kubescape.io/docs/install-cli/· checked 30 Sept 2026
kubescape.io/project/license/· checked 30 Sept 2026
armosec.io/about-us/· checked 30 Sept 2026
armosec.io/pricing/· checked 30 Sept 2026