Kubesplaining
liveKubernetes security assessment CLI for RBAC and privilege escalation path analysis
Details
Kubesplaining is a Kubernetes security assessment CLI that maps RBAC privilege-escalation paths in K8s clusters. It analyzes RBAC bindings and pod configurations to identify potential attack vectors by mapping out the paths an attacker could take to gain cluster-admin access or other privileged capabilities. The tool produces risk-prioritized HTML/JSON/CSV/SARIF reports showing the exact escalation chains with remediation guidance.
Best fit users
- •Kubernetes administrators
- •Security teams
- •DevOps engineers
Why this one made the cut
Traditional Kubernetes scanners only report misconfigured resources without explaining actual attack paths. Kubesplaining provides context by mapping the specific privilege escalation chains an attacker could follow, helping teams understand and mitigate real security risks rather than just identifying low-level misconfigurations.
What makes it different
Unlike other Kubernetes security tools, Kubesplaining focuses specifically on mapping exploitable privilege escalation paths through RBAC connections rather than just reporting misconfigurations. Its reports explain how an attacker would move through the cluster using actual capability chains, with optional offline analysis through snapshot files.