For the complete documentation index, see llms.txt. This page is also available as Markdown.

Security finding categories

KSPM Graph displays security finding categories on every node in the graph. Each category can be enabled or disabled independently.

Category
Description

Vulnerabilities

Displays a severity histogram showing the distribution of Critical, High, Medium, and Low vulnerabilities detected in your container images and workload configurations.

Issues

Highlights misconfigurations and policy violations detected by CIS Kubernetes Benchmark assessments and custom security policies.

Malware

Shows a count of malware detections identified through runtime analysis of container images and workload file systems.

Secrets

Highlights exposed secrets, such as API keys, credentials, and certificates, detected in container images or workload environment variables.

Internet exposure

Provides a Boolean indicator identifying workloads and container images that are reachable from the public internet.

Last updated

Was this helpful?