Kubescape Architecture

Kubescape Architecture An architecture diagram generated by Archify. Kubescape CLI · Terminal runs · Input Sources Kubescape CLI Terminal runs Kubescape Operator · Always-on in cluster · Input Sources Kubescape Operator Always-on in cluster CI/CD Pipeline · Build-stage scans · Input Sources CI/CD Pipeline Build-stage scans Security Frameworks · NSA-CISA · CIS · MITRE ATT&CK · Custom · Architecture component Security Frameworks NSA-CISA · CIS · MITRE ATT&CK · Custom Control Evaluator · Control evaluation · Scan Engine Control Evaluator Control evaluation Vulnerability Scanner · Optional · image and DB access · Scan Engine Vulnerability Scanner Optional · image and DB access RBAC Controls · Checks within posture scan · Scan Engine RBAC Controls Checks within posture scan Result Aggregation · Separate posture/CVE fields · Scan Engine Result Aggregation Separate posture/CVE fields Report Generation · Compiles scan results · Output Report Generation Compiles scan results JSON / SARIF · Structured output · Output JSON / SARIF Structured output Kubescape Cloud · Explicitly configured backend · Output Kubescape Cloud Explicitly configured backend Alerts / Alarms · Separately configured outputs · Output Alerts / Alarms Separately configured outputs Controls Separate result fields Optional Optional Input Sources Scan Engine Output