Security tools
The Shturval platform provides built-in and overlay security tools for assessing cluster security.
Built-in tools include:
- Cluster component scanning for CIS Benchmark compliance. The interface displays Compliance Reports (Scan Results) generated by Trivy Operator.
- Analysis of objects for compliance with security policies in the cluster is performed with Kyverno. The platform provides a summary report on policies across all platform clusters. The platform supports generating, mutating, blocking, and validating policies.
- Container image vulnerability analysis in the cluster is performed with Trivy Operator. Images are checked against FSTEC BDU, the native Trivy database, domestic OS BDU (RED OS, Astra), and NVD BDU. The platform provides a summary report on image analysis across all platform clusters.
- The Session Manager lets you track active user sessions in the graphical interface and terminate a user session when needed.
- The platform lets you manage Seccomp profiles for workloads.
- Using the NodeConfigItem resource, you can configure the audit policy. If the cluster is deployed with the advanced security settings option, events collected by the audit policy are available on the Logs tab of the cluster dashboard.
In the partner product marketplace, you can connect overlay security tools such as Kaspersky Container Security and Luntry.