aquasecurity/kube-hunter

Health v2 · maintenance only

Adoption not part of the score

5078 stars · 611 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

kube-hunter is a Python-based tool that hunts for security weaknesses and vulnerabilities in Kubernetes clusters, running remotely, on a machine, or inside a pod. It reports discoverable issues with vulnerability IDs mapped to a knowledge base and the Kubernetes ATT&CK matrix.

Use cases

• scan my kubernetes cluster for security vulnerabilities
• find exposed kubelets and open ports on a k8s cluster
• audit kubernetes cluster misconfigurations
• run a security penetration test against a kubernetes cluster
• check if my kubernetes api server is publicly accessible
• map security weaknesses in a k8s environment before deployment

When to choose

• you need a quick external or internal security assessment of a Kubernetes cluster
• you want vulnerability findings tied to documented knowledge base articles and the Kubernetes ATT&CK matrix
• you prefer a lightweight Python or container-based scanner you can run from a pod or laptop

When to avoid

• you need actively maintained tooling - the project is no longer under development and maintainers recommend Trivy
• you want comprehensive misconfiguration and KBOM vulnerability scanning, which Trivy now covers
• you need continuous compliance or CIS benchmark scanning rather than point-in-time hunting

Facets

cli-tool · maturity abandoned

security vulnerability-scanning penetration-testing cli security python cli cross-platform kubernetes k8s security-audit penetration-testing vulnerability-scanner aquasecurity containers devops docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="aquasecurity/kube-hunter")