What We've Learned from Scanning 10K+ Kubernetes Clusters
summary
Telemetry from Kubescape + ARMO platform analyzes scans from over 10K clusters (6K+ in the dataset detailed), 40M+ Kubernetes objects, 178 registries and 150k files; average risk score sits around 28%, with 100% of clusters showing at least one misconfiguration and ~40% failing 14+ controls. Common failures include ~90% lacking immutable root filesystems and 84–91% allowing non‑root violations; image scanning narrows thousands of CVEs to the few actually exploitable in runtime.
AI-written summary · about
chapters (11)
- 0:00Kubernetes security research
- 1:28Kubernetes as cloud OS
- 3:12Why Kubernetes security matters
- 4:55Kubescape posture management
- 7:07Scanning 10K+ clusters
- 9:32Misconfiguration findings
- 11:17Failed security controls
- 13:05Image vulnerability scanning
- 17:21CVEs in cloud-native
- 19:50Runtime protection
- 21:22Security priorities
related talks
18mWhat We've Learned from Scanning 10K+ Kubernetes Clusters
51mWhat We've Learned From Scanning 10K+ Kubernetes Clusters
30mWhat We've Learned from Scanning 10K+ Kubernetes Clusters - Gal Gibli
10mLightning Talk: What Have We Learned from Scanning Over 10K Unique Clusters with Ku...
35mUnpacking Open Source Security in Public Repos & Registries
32mStrengthening Kubernetes Security
51mIntroducing the OWASP Top 10 for Kubernetes
35mInsights into Unsecured Kubernetes in the Wild