KubeArmor
KubeArmor: A focused choice for Kubernetes teams enforcing runtime workload policies. Ranked #21 of 26 in Container Security Software by our editors (5.5/10); pricing: Open source; best for kubernetes teams enforcing runtime workload policies.
At a glance
- Editor score5.5 / 10
- PricingOpen source
- Best forKubernetes teams enforcing runtime workload policies
- Paid fromNone
- Founded2020
- Facts checked22 Sep 2026
Where it wins
- Enforces runtime policies with AppArmor, SELinux, or BPF-LSM
- Covers processes, files, networks, pods, namespaces, nodes, and hosts
- Adds Kubernetes-native policies and admission mutation for workloads
Where it doesn't
- Deployment is self-hosted and centered on Linux platforms
- Focuses on runtime enforcement rather than image or registry scanning
- Does not provide SBOM capabilities
Our verdict on KubeArmor
KubeArmor is an open-source runtime security enforcement system for Kubernetes, containers, virtual machines, and bare-metal workloads. It is designed for teams that need policy control over process execution, file access, networking operations, and resource usage across Linux environments. Policies can target containers, pods, nodes, and clusters through Kubernetes-native resources, while telemetry and alerts surface policy violations. Its strongest fit is a Kubernetes team that wants enforcement close to running workloads rather than a broader software supply chain platform.
Runtime coverage is the product’s defining strength. KubeArmor can use AppArmor, SELinux, or BPF-LSM to enforce controls, including process execution and whitelisting, file-system access, and network operations. It also provides container-, pod-, namespace-, and node-aware alerts and telemetry. Host and node protection extends the scope to virtual machines and bare-metal workloads. Integrations with OpenTelemetry, Prometheus, Kafka, and Grafana support observability and event workflows around the enforcement layer.
Kubernetes-native policy resources and the admission mutation controller add a preventive layer before workloads run, complementing runtime controls after deployment. The published positioning is narrower than a platform covering image scanning, registry scanning, and SBOM capabilities, so teams prioritizing those workflows should consider a different category fit. KubeArmor is best suited to Linux-based, self-hosted environments where runtime policy enforcement is the primary requirement. Teams seeking managed deployment or a supply chain-focused security product should look elsewhere.
KubeArmor pricing
KubeArmor fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | None |
| Image scanning | Not verified |
| Runtime protection | Yes |
| Kubernetes security | Yes |
| Registry scanning | Not verified |
| Admission control | No |
| SBOM generation | Not verified |
| Deployment model | Self_hosted |
| Deployment | Cloud, Self-hosted |
| Platforms | Linux |
| Support | Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 1 integrations: SIEM |
| Pricing | Open source |
| Website | kubearmor.io |
| Facts checked | 22 Sep 2026 |
KubeArmor integrations
KubeArmor lists 1 integrations on its own site.
- SIEM
Alternatives to KubeArmor
- Trend Vision One Container SecurityBroad container security coverage with transparent usage-based pricing.9.0
- Qualys Container SecurityBroad container coverage with a free visibility tier and sales-led paid access.8.2
- Snyk ContainerAffordable supply-chain scanning with broad registry, CI/CD, and Kubernetes coverage.7.9
See all KubeArmor alternatives →
Also listed in
Used KubeArmor? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used KubeArmor for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
KubeArmor is listed in our Container Security Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/kubearmor/"><img src="https://www.itechguides.com/best/badge/kubearmor.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Sep 2026
Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. How we rank.
Last updated · How we research and update