> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/kspm.md).

# KSPM

| FEATURE                                        | DESCRIPTION                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| ---------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Secure OpenShift with container image scanning | Strengthen your software supply chain by identifying vulnerabilities earlier in the development lifecycle. Cortex Cloud KSPM now offers direct integration with the OpenShift Internal Registry, allowing you to automatically scan and secure images as soon as they are pushed to the registry . By leveraging the existing Kubernetes connector, you can now extend your security coverage to images stored in the registry.                                                                                                                                                       |
| Interactive KSPM Graph (Beta)                  | Visualize your Kubernetes security posture across supported Kubernetes clusters using the new KSPM Graph. It provides an interactive visualization that maps relationships across your clusters, specifically illustrating Workload-to-Image relationships within Kubernetes Namespaces. It overlays critical security context, such as misconfigurations and detected vulnerabilities, directly onto the graph topology. This allows security and operations teams to quickly identify asset dependencies, correlate risk, and efficiently prioritize where to focus their response. |
| KSPM support for AWS EKS Fargate clusters      | Gain comprehensive security visibility into container images, inventory, and compliance reporting for your nodeless clusters. We now support deploying the Kubernetes Connector directly onto AWS EKS Fargate environments.                                                                                                                                                                                                                                                                                                                                                           |
| KSPM support for Rancher                       | Simplify security and gain central visibility across all your Rancher-managed Kubernetes clusters. The Kubernetes Connector now supports K3s, RKE, and RKE2 clusters. This allows you to unify security posture management, asset inventory, and compliance reporting for your Rancher-managed clusters alongside all other supported cloud and on-premises environments, ensuring consistent security policy enforcement across your entire infrastructure.                                                                                                                          |
| Simplified navigation for Kubernetes Security  | KSPM now has a dedicated navigation section under Modules.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-cloud-runtime-security-rn/cortex-cloud-runtime-security-release-information/features-introduced-in-2026-cloud/february-2026/feature-enhancements/kspm.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.