Open source Kubernetes security intelligence

Know what your RBAC policies can do.

Explore the identities and permissions behind popular Kubernetes projects. RBAC Atlas turns complex access rules into clear findings, risks, and paths to investigate.

Built by Lenin Alevski ยท Updated through automated analysis

Projects indexed
264
Security rules
105

START EXPLORING

Follow the signal

Find patterns across the ecosystem, then inspect a project in detail.

THE BIGGER PICTURE

Threat landscape

Read the daily report

A running view of RBAC risk across the open source Kubernetes ecosystem.

RISK INTELLIGENCE

Risk distribution over time

Recent snapshots
Critical 885
Critical risk trend
High 1031
High risk trend
Medium 521
Medium risk trend
Low 5597
Low risk trend

EXPLORE THE INDEX

All projects

264 projects
All A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

minio

v17.0.21
1 accounts 1 workloads 0 bindings

MinIO(R) is an object storage server, compatible with Amazon S3 cloud storage service, mainly used for storing unstructured data (such as photos, videos, log files, etc.).

mysql

v14.0.3
1 accounts 1 workloads 0 bindings

MySQL is a fast, reliable, scalable, and easy to use open source relational database system. Designed to handle mission-critical, heavy-load production applications.

nextcloud

v9.4.0
4 accounts 6 workloads 0 bindings

A file sharing server that puts the control and security of your own data back into your hands.

2 Critical 2 High 12 Low 4 accounts 4 workloads 16 bindings

Node Feature Discovery (NFD) is a Kubernetes add-on for detecting hardware features and system configuration. Detected features are advertised as node labels. NFD provides flexible configuration and extension points for a wide range of vendor and application specific node labeling needs.

2 accounts 3 workloads 0 bindings

A reverse proxy that provides authentication with Google, Github or other providers

ollama

v1.89.0
1 accounts 2 workloads 0 bindings

Get up and running with large language models locally.

pgadmin4

v1.70.4
0 accounts 1 workloads 0 bindings

pgAdmin4 is a web based administration tool for PostgreSQL database

postgresql

v18.12.4
1 accounts 1 workloads 0 bindings

PostgreSQL (Postgres) is an open source object-relational database known for reliability and data integrity. ACID-compliant, it supports foreign keys, joins, views, triggers and stored procedures.

promtail

v6.17.1
5 Low 1 accounts 1 workloads 5 bindings

Promtail is an agent which ships the contents of local logs to a Loki instance

rabbitmq

v16.0.14
1 accounts 1 workloads 0 bindings

RabbitMQ is an open source general-purpose message broker that is designed for consistent, highly-available messaging scenarios (both synchronous and asynchronous).