Security · 1h ago
Purple team tool exposes blind spots in Kubernetes security scanners
A developer built NEMESIS, a Kubernetes-native purple team platform that runs inside clusters as a DaemonSet. It executed attack scenarios that three major security scanners—Trivy, kube-bench, and Polaris—had all missed. The tool uses Python for orchestration and Go for attack agents, with eBPF integration for flow-level network telemetry.
Meridian48 take
The story underscores a known limitation: static scanners check configuration, not runtime behavior, making dynamic testing essential for real security.
Read the full reporting
I Deployed a Purple Team Inside My Kubernetes Cluster. The Scanners Never Saw It Coming. →
DEV Community
kubernetes-securitypurple-team