What it does
KubeTrace validates Kubernetes clusters continuously. The reader installs a read-only KubeTrace operator with a single YAML file using kubectl commands. The operator uses minimal RBAC and has no write access. The operator then runs its first pass across Security, Network, Storage, Performance, API, and AI/ML checks. KubeTrace says this first scan is typically complete in under 5 minutes. Results include ranked findings with severity and a fix. Results also include a live topology view. A scheduler runs every future run without the reader doing it. KubeTrace says this surfaces drift and misconfiguration before an audit or an outage does.
Capabilities
- Six test categories cover Security, Network, Storage, Performance, API, and AI/ML.
- KubeTrace lists 40+ test suites and 230+ test cases.
- The Security suite publishes every check it runs in full, with no sampling.
- Findings are ranked and include severity and a fix.
- Exportable reports are available for security and compliance use.
When to use it
- You are a platform or SRE team that wants to check every cluster you own for config drift and untested failure paths.
- You need continuous RBAC, network policy, and secrets checks with ranked findings and exportable reports.
- You have no dedicated platform team and want scheduled runs to do the reviewing.
