Open source

Open source security tools that came out of real engagements. Free to use, maintained in the open, and used by our own consultants.

Useful tools

Our engineers spend a share of their time on open source, and the tools below came out of real engagements. They are free to use, and we maintain them in the open.

kubesec github.com/controlplaneio/kubesec (opens in a new tab)	Security risk analysis for Kubernetes resources. Identifies misconfigurations and generates recommendations to improve the security of Pods, Deployments and other resources: find insecure configurations, harden security contexts, and learn Kubernetes pod security.	CLI Free API kubectl plugin GitHub Action GitHub and GitLab marketplaces
netassert github.com/controlplaneio/netassert (opens in a new tab)	Network security testing for DevSecOps workflows. A framework for fast, safe iteration on firewall, routing and NACL rules, for Kubernetes (network policies, services) and non-containerised hosts. Aggressively parallelises nmap to test outbound connections and ports from any accessible host, container or pod.	Kubernetes and bare metal Joins the network namespace under test
Simulator github.com/controlplaneio/simulator (opens in a new tab)	Kubernetes production breach simulation. Provisions full, production-like infrastructure for attacking and debugging Kubernetes: a private cluster per player, scenarios demonstrating compromise paths, and training for defenders. The official CTF engine for every KubeCon since 2019.	Used to provision ControlPlane CTFs
BadRobot github.com/controlplaneio/badrobot (opens in a new tab)	Security analysis for Kubernetes Operators. Analyses YAML manifests before deployment (opens in a new tab) to detect high-risk configurations, and prevents compromised Operators from taking over a cluster through loose RBAC configurations.	Presented at KubeCon EU 2022
truffleproc github.com/controlplaneio/truffleproc (opens in a new tab)	Hunt secrets in a process’s memory. A mashup of TruffleHog and gdb: analyses a target application’s memory and outputs discovered secrets and high-entropy strings. Useful for adversarial emulation, penetration testing, and testing defence-in-depth controls.	Red team tooling

Tools are one part of the open source story.

We also maintain Flux CD and OpenBao, co-chair CNCF TAG Security, and contribute to the standards regulated industries adopt.

Explore what we do

View all

Presentations
- Useful tools
Our ethos is open source security, sharing with the community and learning to secure the next generation of technology in public.