
to Insights
KubeCon EU ''23: Open Source Releases


This year at KubeCon we have the pleasure of open sourcing a variety of cloud native security tooling, representing thousands of hours of thought and build time! We're excited to reveal the immediate release of:
- Netassert v2: a security testing framework for fast, safe iteration on firewall, routing, NetworkPolicy and NACL rules for Kubernetes and non-containerised hosts
- Collie: NIST 800-53r5 compliant OSCAL (opens in a new tab), Kyverno (opens in a new tab), Crossplane (opens in a new tab) and Lula (opens in a new tab) automated compliance validation
- Threat Modelling Zero Trust: What Can Go Wrong When You Trust Nobody? Threat Modeling Zero Trust (opens in a new tab)
- Argo CD End User Threat Model (opens in a new tab): Security considerations for hardening Declarative GitOps CD on Kubernetes, written for the CNCF and Intuit
And pending the relevant talks to announce it:
- Kubernetes for SOC (coming next week!): a set of threat libraries focused on security operations centres for highly regulated and sensitive environments
If you'd like to discuss features or enterprise support of any of our Open Source tooling, arrange a call with our technical leaders.
Get in touch
- [email protected]
- London, NYC, Melbourne, Auckland
Related blogs
View allInternal ≠ Isolated (Or Secure): The Argo CD Repo-Server Flaw
An unpatched, unauthenticated RCE in the Argo CD repo-server that can chain into full Kubernetes cluster takeover.

sandbox-probe: Putting AI sandboxing to the test
Announcing ControlPlane's sandbox-probe: testing the limits of AI Agent Sandboxes

ControlPlane Launches Enterprise Support For OpenBao To Strengthen Secrets Security
ControlPlane Launches Enterprise Support for OpenBao.

Speak to an expert
Engage with world-leading AI and cloud security specialists