← Back to Security & Essentials

Kubernetes Security Posture Scorecard

Evaluate your clusters security across 6 critical domains and receive a prioritized remediation roadmap aligned with CIS, NIST, and PCI benchmarks.

https://hub.toolweb.in/security/k8scorecard/

Endpoints

POST /k8s-scorecard

Generate Scorecard

Request Body (JSON)

{
  "cluster_name": "<string>",
  "environment": "<string>",
  "k8s_version": "<string>",
  "cloud_provider": "<string>",
  "rbac_enabled": "<boolean>",
  "anonymous_auth_disabled": "<boolean>",
  "node_restriction_enabled": "<boolean>",
  "audit_logging_enabled": "<boolean>",
  "etcd_encrypted": "<boolean>",
  "pod_security_policies": "<boolean>",
  "privileged_containers": "<boolean>",
  "root_containers": "<boolean>",
  "image_scanning_enabled": "<boolean>",
  "admission_controller_enabled": "<boolean>",
  "network_policies_defined": "<boolean>",
  "ingress_tls_enforced": "<boolean>",
  "service_mesh_enabled": "<boolean>",
  "inter_pod_isolation": "<boolean>",
  "iac_used": "<boolean>",
  "iac_scanning_enabled": "<boolean>",
  "gitops_workflow": "<boolean>",
  "drift_detection": "<boolean>",
  "runtime_monitoring_enabled": "<boolean>",
  "falco_or_equivalent": "<boolean>",
  "fim_enabled": "<boolean>",
  "audit_trail_enabled": "<boolean>",
  "auto_incident_response": "<boolean>",
  "secrets_encrypted_at_rest": "<boolean>",
  "external_secrets_manager": "<boolean>",
  "no_hardcoded_secrets": "<boolean>",
  "compliance_frameworks": "",
  "notes": ""
}

GET /health

Health

Quick Start

# cURL

curl -H "X-API-Key: YOUR_API_KEY" \
  https://hub.toolweb.in/security/k8scorecard/

# Python

import requests
r = requests.get("https://hub.toolweb.in/security/k8scorecard/",
    headers={"X-API-Key": "YOUR_API_KEY"})
print(r.json())

# JavaScript

fetch("https://hub.toolweb.in/security/k8scorecard/", {
  headers: { "X-API-Key": "YOUR_API_KEY" }
}).then(r => r.json()).then(console.log)