KU

kube-bench

Check Kubernetes clusters against the CIS benchmark

Developer Tools & Git ★ 8.2k stars Easy setup Apache-2.0

kube-bench is an open-source tool from Aqua Security that checks whether Kubernetes is deployed securely according to the CIS Kubernetes Benchmark. It is run against self-hosted clusters for compliance auditing.

Key features

  • CIS benchmark checks
  • Multiple K8s versions
  • JSON output
  • Run as a job

Strengths

  • Released under the Apache-2.0 license
  • Easy to set up — beginner-friendly
  • First-class Docker support for quick deployment
  • Mature project with 8.2k GitHub stars

Is kube-bench secure?

OSV.dev has no published security advisories for kube-bench's repository. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

Source: OSV.dev, checked 2026-10-14. How this is measured.

kube-bench replaces

Health badge

Maintain kube-bench? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 92 · excellent

Markdown
[![SelfHostIndex health score for kube-bench](https://selfhostindex.com/badge/kube-bench.svg)](https://selfhostindex.com/app/kube-bench/)
HTML
<a href="https://selfhostindex.com/app/kube-bench/"><img src="https://selfhostindex.com/badge/kube-bench.svg" alt="SelfHostIndex health score for kube-bench"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/kube-bench.svg
   :alt: SelfHostIndex health score for kube-bench
   :target: https://selfhostindex.com/app/kube-bench/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Similar developer tools & git apps