aquasecurity/kube-bench

Health v2 · maintenance only

Adoption not part of the score

8155 stars · 1335 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

kube-bench is a Go-based tool that checks whether Kubernetes clusters are deployed securely by running the checks documented in the CIS Kubernetes Benchmark. Tests are configured with YAML files, and it can run as a Kubernetes Job, a container, or a binary on the host.

Use cases

• audit a kubernetes cluster against cis security benchmarks
• check kubelet and control plane security configuration
• run cis compliance scans as a kubernetes job
• verify kubernetes hardening before production
• generate compliance reports for cluster security
• scan openshift deployments for cis benchmark compliance

When to choose

• you need CIS Kubernetes Benchmark compliance checks for a cluster
• you want a lightweight, YAML-configurable security audit tool
• you need to run security checks as a scheduled Kubernetes Job

When to avoid

• you need broad vulnerability scanning beyond CIS benchmarks - use Trivy instead
• you want continuous in-cluster scanning with an operator - use Trivy Operator
• you are not running Kubernetes or OpenShift

Facets

cli-tool · maturity active

security vulnerability-scanning testing cli security cloud-computing go cli cis-benchmark kubernetes-security security-audit compliance openshift containers devops kubernetes docker linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="aquasecurity/kube-bench")