KSPM Graph displays security finding categories on every node in the graph. Each category can be enabled or disabled independently.
Category | Description |
|---|---|
Vulnerabilities | Displays a severity histogram showing the distribution of Critical, High, Medium, and Low vulnerabilities detected in your container images and workload configurations. |
Issues | Highlights misconfigurations and policy violations detected by CIS Kubernetes Benchmark assessments and custom security policies. |
Malware | Shows a count of malware detections identified through runtime analysis of container images and workload file systems. |
Secrets | Highlights exposed secrets, such as API keys, credentials, and certificates, detected in container images or workload environment variables. |
Internet exposure | Provides a Boolean indicator identifying workloads and container images that are reachable from the public internet. |