KSPM dashboard

Important

Users can access all information on the dashboard when their user access is scoped to view All assets or assigned to the Instance Administrator role. Otherwise, users with granular scoping set to No assets or Select asset groups will have limited access to the dashboard. For more information on Scope-Based Access Control (SBAC), see Manage user scope in the Cortex Cloud Runtime Security Documentation or Manage user scope in the Cortex Cloud Posture Management Documentation.

The KSPM dashboard provides a centralized overview of your entire Kubernetes environment, enabling you to quickly identify risks and prioritize remediation actions. The KSPM dashboard is included in the predefined dashboards.

To access the KSPM dashboard, select Dashboards & Reports → Dashboard or Modules → Kubernetes Security → KSPM Dashboard . From the dashboard header, a drop-down menu lists all available predefined and custom dashboards. Select KSPM. You can use the filtering options at the top of the dashboard to focus on specific cloud accounts and clusters.

The dashboard consolidates critical security and operational data into the following widgets, allowing you to assess your security posture at a glance:

• Kubernetes Assets Overview: Obtain a high-level inventory of your Kubernetes environment, displaying the total count of clusters, namespaces, nodes, and workloads. Click on the drop-down icon for each asset to see a detailed breakdown of the Kubernetes platform type or workload. Click on an asset type to go to the Kubernetes Resources page, filtered according to that asset type.
• Cluster Protection Coverage: This widget shows the percentage of clusters that are fully protected for real time protection and posture management are installed on this cluster. protected with posture management, protected with real-time management, or unprotected. Identify your protection coverage gaps so that you can prioritize the riskiest clusters and onboarding of unprotected clusters. Click on the more options icon to see all clusters in the Kubernetes Connectivity Management page. Clicking on each state takes you to the Kubernetes Cluster page filtered by the state.
• Malware Detected: A list of cluster names and the total count of malware detected within them to allow for quick identification and response to active threats. Click a cluster row to open that cluster's asset side pane and investigate its findings. Click on the more options icon to go to the Policy Management page.
• Cases and Issues: Displays the total number of cases and issues currently opened across your Kubernetes environment. Click on the more options icon to go to the Cases or Issues pages.
• Top Clusters by Vulnerabilities: Kubernetes clusters are ranked based on the number of high-severity vulnerabilities, ranked by CVSS score. Click a cluster row to open that cluster's asset side pane and investigate its findings. Click on the more options icon to see all clusters in the Kubernetes Connectivity Management page or to go to the Vulnerability Policies Management page.
• Secrets Detected in Clusters: Shows the number of unsecured secrets found within your clusters. Click on the more options icon to go to the Policy Management page.