Attestkeep
Sign up
Operations

Runs on a cluster with no route out.

Create an account Air-gapped installs
your cluster, no route out Your registry images and the mirrored vulnerability database Attestkeep scanner, admission, console, database Activation request file Licence page attestkeep.com uploaded by hand Certificate for this cluster carried back by hand
The cluster never calls us. Offline activation is for annual Enterprise licences, or by agreement.
What it does

Air-gapped operation

The scanner and signer are pinned into the release and the vulnerability database is mirrored into a registry you run. The framework mapping ships inside the operator, so an air-gapped cluster reports what a connected one does.

Licensing works offline too. The console writes an activation request; you upload it on your licence page and carry back a certificate for that cluster, valid to the end of the paid term plus thirty days. Offline activation is for annual Enterprise licences, or by agreement.

How it works

Step by step.

  1. Mirror

    The release images and the vulnerability database into your registry.

  2. Install

    With Helm, from your mirror.

  3. Write a request

    The console produces an activation request file.

  4. Upload it

    On your licence page.

  5. Carry the certificate back

    The cluster never calls us.

What it records

An air-gapped cluster produces the same signed evidence packages as a connected one.

Air-gapped installsLicensing

Install it yourself.

Create an account, confirm your e-mail with the code we send, take the free Community key from the Licenses page, and install with Helm.

Create an account