01
Cluster monitoring
KSPM continuously monitors Kubernetes environments and checks clusters against compliance requirements.
Outcome: Continuous cluster coverage
← Products
Xcitium offering
Kubernetes Security Posture Management (KSPM)
Configuration and risk assessment for Kubernetes clusters. KSPM continuously assesses Kubernetes cluster misconfigurations and security risks, with compliance checks and recommendations.
Discuss your requirements ↗
Kubernetes cluster security posture
Assess cluster risks and track remediation
KSPM continuously assesses Kubernetes cluster configuration and risk. Compliance checks and recommendations connect to the DevOps change workflow, with results tracked in reports.
02
Configuration and risk assessment
KSPM assesses cluster settings, vulnerabilities, and misconfigurations as part of continuous compliance and risk monitoring.
Outcome: Configuration and risk findings
03
DevOps integration and remediation
KSPM connects checks to development and deployment workflows and addresses security issues through predefined actions or recommended fixes.
Outcome: Cluster remediation in the DevOps workflow
04
Verify and report
Continuous checks track cluster risk and compliance; alerts and detailed reports present the results.
Outcome: Risk and compliance report
Assessment
Kubernetes clusterConfigurationRisksCompliance checkContinuous assessment
DevOps flow
DevOps workflowCluster changeRecommended remediationOperational result
Platform and DevOps teams follow cluster configuration risks, selected remediations, and compliance results in one workflow.
Capabilities
Capabilities with a specific purpose
Cluster configuration monitoring
KSPM continuously checks security settings and configuration errors in Kubernetes resources.
Cluster risk assessment
KSPM assesses the risk of cluster vulnerabilities and misconfigurations.
Continuous compliance checks
KSPM continuously checks Kubernetes resources against industry standards and requirements, generating alerts and reports.
Recommendations and policy remediation
KSPM provides configuration recommendations and addresses security issues through predefined actions or recommended fixes.
DevOps workflow and reporting
KSPM integrates risk checks and reporting into development and deployment workflows.
Compare approaches
Cluster security and broader cloud configuration
| Consideration | KSPM | CSPM |
|---|---|---|
| Scope | Kubernetes clusters and their configuration. | Cloud accounts, services, and broader security configuration. |
| Checks | Cluster risks, Kubernetes settings, vulnerabilities, and misconfigurations. | Cloud resource baselines, policies, and deviations. |
| Operational workflow | The platform team connects cluster remediation to DevOps workflows. | Cloud security owners manage findings across accounts and services. |
| Selection | Choose when risk is concentrated in Kubernetes clusters and deployment settings. | Choose when risk spans cloud configuration and the service inventory. |
Before you start
Questions for a Kubernetes pilot
Validate checks and remediation on a test cluster first. Then plan a change window for critical workloads and production clusters.
- 01
Which Kubernetes versions, managed clusters, and namespaces are supported?
- 02
Which cluster roles and API permissions do checks require?
- 03
How are findings routed to tickets and deployment pipelines?
- 04
Which policies and rollback plan are required for automated remediation?
Evidence for your evaluation
In practice
Configuration risks in a Kubernetes cluster
A platform team wants to assess cluster misconfigurations and risks continuously, with compliance checks connected to the DevOps change process.
What your team gains
- 01
Continuous compliance and risk assessment across Kubernetes clusters.
- 02
Recommendations and remediation actions for configuration issues.
- 03
Checks and reports connected to DevOps workflows.
Before you decide
Questions, answered
Which resources does KSPM assess?
KSPM assesses configuration risks and vulnerabilities in Kubernetes clusters and performs compliance checks.
Can KSPM checks connect to DevOps processes?
Yes. KSPM checks integrate with development and deployment workflows.
How does KSPM remediate security issues?
KSPM uses predefined actions or recommended fixes to address security issues.
Next step
Discuss your requirements
Tell us about your environment and priorities to discuss the right solution, pilot scope and rollout in Azerbaijan.