Show HN: Kguardian – seccomp profiles and NetworkPolicies from eBPF traces

Category: security

Tags: kubernetes, ebpf, security, network-policy, seccomp, policy-generation, observability

Score: 7.5/10 (Innovation: 7, Technical: 8, Documentation: 8, Utility: 7)

kguardian uses eBPF to observe pod network traffic and syscalls in Kubernetes, then generates least-privilege NetworkPolicy, CiliumNetworkPolicy, and seccomp profiles from those observations. It stands out for its review-first design, audit mode for policies, and integrated web UI and AI assistant, making policy-as-code accessible without hand-authoring rules.

Target audience: devops, platform engineers, security engineers, backend developers

Repository: https://github.com/kguardian-dev/kguardian · Rust · NOASSERTION · 72 stars

View on Hacker News