Open source Kubernetes security intelligence

Know what your RBAC policies can do.

Explore the identities and permissions behind popular Kubernetes projects. RBAC Atlas turns complex access rules into clear findings, risks, and paths to investigate.

Built by Lenin Alevski ยท Updated through automated analysis

Projects indexed
264
Security rules
105

START EXPLORING

Follow the signal

Find patterns across the ecosystem, then inspect a project in detail.

THE BIGGER PICTURE

Threat landscape

Read the daily report

A running view of RBAC risk across the open source Kubernetes ecosystem.

RISK INTELLIGENCE

Risk distribution over time

Recent snapshots
Critical 885
Critical risk trend
High 1031
High risk trend
Medium 521
Medium risk trend
Low 5597
Low risk trend

EXPLORE THE INDEX

All projects

264 projects
All A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

rancher

v2.15.2
20 Low 3 accounts 3 workloads 20 bindings

Install Rancher Server to manage Kubernetes clusters across providers.

redis

v28.3.1
2 accounts 2 workloads 0 bindings

Redis(R) is an open source, advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets.

29 Low 1 accounts 1 workloads 29 bindings

Helm chart for the deployment of JFrog Runtime Security Agents within a Kubernetes environment.

3 Low 1 accounts 1 workloads 3 bindings

Catalogue all images of a Kubernetes cluster to multiple targets with Syft

sonarqube

v2026.5.1002
4 Critical 4 High 1 Medium 40 Low 4 accounts 4 workloads 49 bindings

SonarQube is a self-managed, automatic code review tool that systematically helps you deliver clean code. As a core element of our Sonar solution, SonarQube integrates into your existing workflow and detects issues in your code to help you perform continuous code inspections of your projects. The tool analyses 30+ different programming languages and integrates into your CI pipeline and DevOps platform to ensure that your code meets high-quality standards.

1 accounts 1 workloads 0 bindings

Telegraf is an agent written in Go for collecting, processing, aggregating, and writing metrics.

thanos

v17.3.1
3 accounts 3 workloads 0 bindings

Thanos is a highly available metrics system that can be added on top of existing Prometheus deployments, providing a global query view across all Prometheus installations.

1 Critical 5 Low 1 accounts 1 workloads 6 bindings

This helm chart installs the Digitalis Vals Operator to manage and sync secrets from supported backends into Kubernetes. ## About Vals-Operator Here at Digitalis we love vals, it’s a tool we use daily to keep secrets stored securely. Inspired by this tool, we have created an operator to manage Kubernetes secrets. vals-operator syncs secrets from any secrets store supported by vals into Kubernetes. Also, vals-operator supports database secrets as provider by HashiCorp Vault Secret Engine.

7 Low 1 accounts 1 workloads 7 bindings

VictoriaMetrics Agent - collects metrics from various sources and stores them to VictoriaMetrics