Search the atlas

BROWSE THE ATLAS

Risk signals

Explore recurring RBAC findings and the projects where they appear.

InformationDisclosure [113] DataExposure [101] ConfigMapAccess [92] Reconnaissance [96] CredentialAccess [94] SecretAccess [91] Tampering [93] PotentialPrivilegeEscalation [92] ClusterStructure [77] ClusterWideSecretAccess [78] LateralMovement [77] Persistence [75] PrivilegeEscalation [83] NodeAccess [69] DenialOfService [82] CodeExecution [55] ClusterAdminAccess [63] ElevationOfPrivilege [52] ResourceConfiguration [41] QuotaTampering [39] WildcardPermission [64] WorkloadLifecycle [60] NetworkManipulation [60] RBACQuery [63] AuthorizationBypass [45] WebhookReconnaissance [47] ServiceExposure [57] ResourceNameRestricted [66] OperationalData [52] WorkloadExecution [53] ClusterWideAccess [58] ControlPlaneDisruption [57] LogAccess [39] TrafficRedirection [31] IdentityManagement [38] PodExec [27] CriticalNamespace [51] BindingToPrivilegedRole [35] RBACManipulation [35] ManInTheMiddle [24] AvailabilityImpact [27] PodPortForward [14] PodAttach [11] ClusterWideLogAccess [27] DeprecatedFeature [25] PodSecurityPolicy [25] ClusterWidePodExec [21] Spoofing [22] StorageDetailsDisclosure [23] NetworkPolicyManagement [19] LeaderElectionAbuse [21] ResourceDeletion [25] NamespaceLifecycle [22] Impersonation [18] NamespaceAdmin [19] WebhookManipulation [17] CRDManipulation [21] ClusterWidePodPortForward [10] DataLoss [13] ResourceModification [12] CertificateManagement [9] APIServiceManipulation [7] CSRCreation [10] SelfPermissionReviewQuery [9] ControllerRevisionTampering [8] TokenCreation [8] StorageManipulation [11] ClusterWidePodAttach [7] NodeManipulation [8] SchedulingAbuse [8] CSRApproval [7] APIServerDoS [5] BackupAccess [5] NamespaceWideAccess [15] WorkloadDeployment [6]