Security & Compliance

Kubernetes Security Audit: Keeping Your Clusters Secure and Under Control

We assess the security and architecture of your Google Kubernetes Engine clusters, identify blind spots, and make your environment audit-ready—from the DevOps engineer to the CTO.

A smiling StackWorks employee in the office lounge area
Leading companies rely on solutions from StackWorks AG
Quick Check

How secure are your clusters today?

Five questions, one minute. You'll see right away where you stand—no forms and no registration required.

1Are your container images regularly scanned for vulnerabilities?
2Are access rights in the cluster assigned according to the principle of least privilege?
3Are your workloads prepared for the failure of individual nodes?
4Is network traffic between services restricted?
5Was your cluster audited by an external party last year?
Your result
Still pending

Answer the five questions, and the result will appear here.

Discuss the results
Your Added Value

What a Kubernetes Audit Can Do for You

Kubernetes is becoming a central component of IT. High availability and workload hardening are becoming increasingly important.

Request a Kubernetes Audit
01

Adapt safety to requirements

Their measures keep pace with the growing security requirements.

02

Comprehensive and proven checks

We conduct a thorough review of your instance and compare it to current best practices.

03

Neutral support

An outside perspective prevents operational blindness and identifies high-risk vulnerabilities.

04

Using Resources in a Targeted Manner

They focus on the tasks that really matter.

The Difference

From Conjecture to Certainty

Today
They hope that the configuration is secure.
Vulnerabilities in images remain undetected.
Its reliability has not been proven.
Resources remain unused and cost money.
After the audit
A traffic-light system highlights strengths and weaknesses.
Risks are prioritized by urgency.
Resilience and high availability have been tested.
Recommendations show where resources are best spent.
Documents

Proven experience

300+
Swiss companies as customers
2013
has been working with small and medium-sized enterprises since this year
ISO 9001 certified by Swiss Safety CenterISO/IEC 27001 certified by Swiss Safety Center
9001 and 27001 for Quality and Information Security
2
Certified Partnerships, Google, and Microsoft

Certified Kubernetes Expertise

Our consultants are certified as Kubernetes Administrators and Kubernetes Security Specialists.

Dual-Control Principle

Each report is reviewed by two specialists before you receive it.

Compliant

We do not require access to sensitive data, and we always operate in compliance with all regulations.

"It is and has always been important to us to have a partner who works with us in a flexible, competent, and solution-oriented manner. StackWorks offers this and more."

Portrait of Michel Lips
Michel Lips
View Case Studies
Scope of the Audit

What We Review in Kubernetes Security and Architecture

We analyze your Kubernetes processes using Google Cloud infrastructure.

  1. 01Google Cloud InstanceWe review your configurations with regard to the Google Cloud infrastructure.Google Kubernetes Engine
  2. 02Kubernetes-Specific ChecksWe inspect the cluster's configuration and ensure it aligns with best practices.
  3. 03ReliabilityWe assess how resilient and highly available your workloads are.
  4. 04Resource UtilizationWe show where requested resources remain unused.
  5. 05ComplianceWe operate without access to sensitive data.
At a Glance
ResultReport with traffic light system and recommendations
ProcedureOnboarding, Audit, Presentation
PrincipleDual Control
Request an Audit
Cluster Analysis
Findings by Severity
Fulfilled
Improve
Critical
2 abnormal findings

Sample illustration

Your Audit Report

Meaningful results instead of long lists

A traffic-light system provides a clear overview of your organization. A template outlines recommended actions and helps you decide where to allocate resources.

  • Neutral sounding out of potential for improvement
  • Specific Recommendations for Action
  • Report as a PDF in accordance with the dual-control principle
  • Review of implemented measures upon request
Procedure

Four Steps to Better Kubernetes Security

The first step is a one-on-one meeting. After that, you can take your time to decide.

1

Initial consultation

We'll get back to you with a proposed date and discuss the scope, details, and objectives. After that, you'll receive a clear quote.

Ishan Don, Founder and Managing Director of StackWorks AG
Ishan Don
Founder & Managing Director
2

Onboarding

During a meeting, we explain our approach and ask for the necessary information.

3

Audit

We'll generate the report, review it using the dual-review process, and create a PDF for you.

4

Presentation

Together, we'll review the results and discuss possible improvements.

Ready to get a clear picture of your clusters?

Schedule an Initial Consultation
FAQ

Frequently asked questions and answers

Kubernetes is an open source system developed by Google. It is used to automate the deployment, scaling and management of containerized applications.

The intervals for security audits for Kubernetes depend on various factors. These include the critical nature of the applications, compliance requirements, and changes in the system. We would be happy to advise you.

Kubernetes security depends on proper configuration, implementation, and management. Implementing security best practices and regularly auditing and updating the cluster can increase security.

A smiling man wearing a headset is working at a computer in an office, with a laptop in front of him
Ishan Don
Founder & Managing Director

Do you have a question?