Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Kyverno

Free#21 of 26 in Container Security SoftwareInfrastructure Policy as Code ToolsKubernetes Security SoftwareInfrastructure as Code Security Software+1 more

Kyverno: A focused open-source policy engine for Kubernetes admission and runtime controls. Ranked #21 of 26 in Container Security Software by our editors (6.8/10); pricing: Open source; best for kubernetes teams focused on policy admission controls.

6.8/10Editor score
Visit Kyverno
Kyverno6.8 Visit Kyverno

At a glance

  • Editor score
    6.8 / 10
  • Pricing
    Open source
  • Best for
    Kubernetes teams focused on policy admission controls
  • Paid from
    Free
  • Founded
    2019
  • Facts checked
    22 Sep 2026
Kyverno screenshot

  • Where it wins

    • Validates, mutates, generates, and cleans up Kubernetes resources
    • Verifies container image signatures and attestations
    • Combines admission control, runtime scans, reports, and CLI scanning

  • Where it doesn't

    • Does not provide image vulnerability scanning
    • Does not provide registry scanning
    • Does not generate SBOMs for user workloads

Our verdict on Kyverno

Kyverno is an open-source, self-hosted policy engine built around Kubernetes security, compliance, and governance. Platform engineers can write policies in YAML or CEL, then apply them through Kubernetes admission control, runtime policy evaluation, background scans, or the Kyverno CLI. It suits teams that want policy decisions close to cluster resources, especially when admission controls are central to their operating model.

Its strongest area is the breadth of Kubernetes policy actions. Kyverno can validate and mutate resources, generate new resources, clean up matching objects, and produce policy reports using the OpenReport format. It also supports policy exceptions, image digest mutation and enforcement, and verification of container image signatures and attestations. Installation uses Helm charts or YAML manifests, giving Kubernetes teams two familiar deployment paths without shifting the product away from its cluster-native focus.

Kyverno's open-source model makes it a fit for organizations that prefer self-hosted policy tooling rather than a paid, externally managed service. Its supply-chain controls are focused on image signatures, attestations, and digests, not on image vulnerability scanning, registry scanning, or SBOM generation. Teams seeking Kubernetes admission governance and policy automation should consider Kyverno; teams primarily looking for vulnerability management or SBOM workflows should choose a product centered on those capabilities instead.

Your product? Our editors can test Kyverno in depth and publish a review, labelled as paid · from $149/mo →

Kyverno pricing

Plans Open sourceFree Free to use — no paid tier required for the core job.
See plans on kyverno.io

Kyverno fact sheet

Free planNot verified
Paid fromFree
Image scanningNot verified
Runtime protectionNot verified
Kubernetes securityYes
Registry scanningNot verified
Admission controlYes
SBOM generationNot verified
Deployment modelSelf_hosted
DeploymentSelf-hosted
PlatformsLinux, Windows, macOS
SupportCommunity, Docs
Built forSmall business, Mid-market, Enterprise (editorial estimate)
Integrations8 integrations: Kubernetes, Helm, kubectl, Kustomize, Git, Cosign …
PricingOpen source
Websitekyverno.io
Facts checked22 Sep 2026

Kyverno integrations

Kyverno lists 8 integrations on its own site.

  • Kubernetes
  • Helm
  • kubectl
  • Kustomize
  • Git
  • Cosign
  • Notary
  • Sigstore

Alternatives to Kyverno

See all Kyverno alternatives →

Also Ranked In

Kyverno is ranked in 5 of our directories.

Used Kyverno? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Kyverno for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — Kyverno 6.8/10

Kyverno is listed in our Container Security Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/kyverno/"><img src="https://www.itechguides.com/best/badge/kyverno.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update