Blog
Notes from the field
What we find, how we find it, and how we write it up.
-
How we measure coverage
The coverage score estimates how much of your attack surface we looked at and assessed. How it stays honest about the unknown, why likelihood drives criticality, and why our two-pass method caps it at 80% and 99%.
-
Common Kubernetes misconfigurations
Exposed components, broken auth, loose RBAC, plaintext secrets, flat networks, privileged pods — the short version of the OWASP Kubernetes Top 10, with a one-line check for each so you can run it yourself.