> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/kubernetes-security/kspm-dashboard.md).

# KSPM dashboard

{% hint style="info" %}

### Important

Users can access all information on the dashboard when their user access is scoped to view **All assets** or assigned to the Instance Administrator role. Otherwise, users with granular scoping set to **No assets** or **Select asset groups** will have limited access to the dashboard. For more information on Scope-Based Access Control (SBAC), see [Manage user scope](https://app.gitbook.com/s/mxWuY3s7AUvWfzCV9p1A/post-deployment-steps/manage-user-roles-and-access-management/manage-user-scope) in the Cortex Cloud Runtime Security Documentation or [Manage user scope](https://app.gitbook.com/s/Hpcayc1yGiwVhvGJ7DK1/post-deployment-steps/manage-user-roles-and-access-management/manage-user-scope) in the Cortex Cloud Posture Management Documentation.
{% endhint %}

The KSPM dashboard provides a centralized overview of your entire Kubernetes environment, enabling you to quickly identify risks and prioritize remediation actions. The KSPM dashboard is included in the predefined dashboards.

To access the KSPM dashboard, select **Dashboards & Reports** → **Dashboard** or **Modules** → **Kubernetes Security** → **KSPM Dashboard** . From the dashboard header, a drop-down menu lists all available predefined and custom dashboards. Select **KSPM**. You can use the filtering options at the top of the dashboard to focus on specific cloud accounts and clusters.

The dashboard consolidates critical security and operational data into the following widgets, allowing you to assess your security posture at a glance:

* **Kubernetes Assets Overview**: Obtain a high-level inventory of your Kubernetes environment, displaying the total count of clusters, namespaces, nodes, and workloads. Click on the drop-down icon for each asset to see a detailed breakdown of the Kubernetes platform type or workload. Click on an asset type to go to the **Kubernetes Resources** page, filtered according to that asset type.
* **Cluster Protection Coverage**: This widget shows the percentage of clusters that are fully protected for real time protection and posture management are installed on this cluster. protected with posture management, protected with real-time management, or unprotected. Identify your protection coverage gaps so that you can prioritize the riskiest clusters and onboarding of unprotected clusters. Click on the **more options** icon to see all clusters in the **Kubernetes Connectivity Management** page. Clicking on each state takes you to the Kubernetes Cluster page filtered by the state.
* **Malware Detected**: A list of cluster names and the total count of malware detected within them to allow for quick identification and response to active threats. Click a cluster row to open that cluster's asset side pane and investigate its findings. Click on the **more options** icon to go to the **Policy Management** page.
* **Cases and Issues**: Displays the total number of cases and issues currently opened across your Kubernetes environment. Click on the **more options** icon to go to the **Cases** or **Issues** pages.
* **Top Clusters by Vulnerabilities**: Kubernetes clusters are ranked based on the number of high-severity vulnerabilities, ranked by CVSS score. Click a cluster row to open that cluster's asset side pane and investigate its findings. Click on the **more options** icon to see all clusters in the **Kubernetes Connectivity Management** page or to go to the **Vulnerability Policies Management** page.
* **Secrets Detected in Clusters**: Shows the number of unsecured secrets found within your clusters. Click on the **more options** icon to go to the **Policy Management** page.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/kubernetes-security/kspm-dashboard.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.