Misconfigurations

Detect and fix security misconfigurations in your Kubernetes cluster against industry compliance frameworks.

Overview

The Misconfigurations feature scans your Kubernetes cluster against multiple security compliance frameworks to identify configuration issues that could pose security risks.

Supported Frameworks

How to Use

Running a Compliance Check

1. Navigate to Security > Security Scanning > Misconfigurations
2. Select a compliance framework tab (e.g., CIS Benchmark)
3. Click the Rescan button to run a fresh scan
4. Review the compliance results

Understanding Results

The dashboard shows:

• Passed - Checks that your cluster passed (green)
• Failed - Checks that need attention (red)
• Warning - Checks with potential issues (yellow)
• Compliance Score - Overall percentage of passed checks

Viewing Check Details

1. Click on a specific check in the Compliance Checks section
2. View the detailed description of the issue
3. See the affected resources
4. Get remediation guidance

Filtering Results

Use the controls in the top right to:

• Grouped/List - Toggle between grouped and list view
• All Severities - Filter by severity level
• Rescan - Run a new compliance scan

Best Practices

1. Start with CIS - The CIS Kubernetes Benchmark is a good baseline
2. Address Failed First - Focus on failed checks before warnings
3. Regular Scans - Schedule regular compliance checks
4. Track Progress - Monitor your compliance score over time
5. Use Exceptions - Create exceptions for intentional deviations

Next Steps

• Security Exceptions - Manage compliance exceptions
• Image Security - Scan for vulnerabilities