KubeArmor is an application hardening solution that uses AppArmor and SELinux to harden and protect your workloads at run-time. KubeArmor Open-source and is a CNCF incubating project.

Auto discovery of policies enables developers and security engineers to quickly create policies based on actual observed behavior of the application. This can then be enforced at run-time to enable zero trust.

Common tactics, techniques, and procedures (TTP) that form the basis of the MITRE ATT&CK framework as well as STIGS have been implemented as policy templates. These policy templates can be quickly and easily apply to your workloads and protect them at runtime.

Cilium is eBPF-based Networking, Observability, and Security Tool for Kubernetes environments across cloud and on-premises infrastructure. We are focused on adding value to Cilium in the following areas of SPIFFE Based Identity, Policy Discovery, Policy Staging Support and Improved L7 Visibility