Product
One Helm release, inside your cluster.
The operator, its console and its database install into a namespace you own. The only call out of the cluster is a daily licence check that carries three values.
Admission control
Scan, verify and decide before a pod runs
Admission controlSupply chain
Signatures, attestations, SBOMs, provenance
Supply chainEvidence and audit
Signed reports and a ledger you cannot quietly rewrite
Evidence and auditRuntime with Falco
Falco sees, Attestkeep decides. Coming in 1.2.0
Runtime with FalcoOperations
Notifications, issue trackers, air-gapped clusters
Operations
How the parts connect
From image to evidence, one chain.
- ScanTrivy, inside the cluster
- Verify the signaturecosign, key or keyless
- Decide at admissionyour policy, on the cached verdict
- Recordevery allow and deny, in the ledger
- Sign the reportwith the installation's key
- Verify anywhereby your auditor, without us
Install it yourself.
Create an account, confirm your e-mail with the code we send, take the free Community key from the Licenses page, and install with Helm.
Create an account