I've been deep in our cloud security posture management (CSPM) evaluation, and our team is running more and more on Kubernetes. We're currently using a mix of open-source tools and some native cloud provider checks, but it's getting fragmented.
I saw that Rapid7 InsightCloudSec has a dedicated focus on K8s misconfigurations, going beyond just checking for publicly exposed pods. Their documentation mentions scanning for things like overly permissive service accounts, non-compliant network policies, and even checking against the NSA/CISA Kubernetes Hardening Guide.
For those who have used it:
* How accurate and actionable are the findings compared to something like Kube-bench or commercial rivals?
* Does the integration feel native, especially if you're already using InsightCloudSec for cloud resource scanning?
* I'm curious about the operational overhead. Is the setup for the K8s agent straightforward, and does it add noticeable load?
We're trying to avoid just adding another alert silo. The value for us would be in having those Kubernetes risks contextualized with our overall cloud security view.