kubescape

kubescape 4.0.16

An open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters

  • By kubescape
  • Open Source
  • Updated Oct 14, 2026
Download for Windows

About kubescape

Kubescape is an open-source Kubernetes security platform. It includes risk analysis, security compliance, and misconfiguration scanning. Targeted at the DevSecOps practitioner or platform engineer, it offers an easy-to-use CLI interface, flexible output formats, and automated scanning capabilities. It saves Kubernetes users and admins precious time, effort, and resources. Kubescape scans clusters, YAML files, and Helm charts. It detects misconfigurations according to multiple frameworks (including NSA-CISA, MITRE ATT&CK® and the CIS Benchmark). Kubescape was created by ARMO and is a Cloud Native Computing Foundation (CNCF) sandbox project.

What's new in 4.0.16

Changelog

  • 02cd407 Feat/rbac parity differential testing (#4076)
  • 58b7c1e Fix file permission gosec warnings in httphandler tests (#3924)
  • 4a3ccb4 Honor control exclusions in HTTP scans (#4116)
  • b83f2bd chore(containerscan): remove unused core/pkg/containerscan package (#4069)
  • a396043 chore(deps): bump github.com/kubescape/go-logger from 0.0.34 to 0.0.35 (#4084)
  • d740964 chore(resultshandling): remove dead legacy wrappers superseded by ResourceCatalog (#4082)
  • a111524 ci(security-insights): migrate to Security Insights v2.2.0 (#4059)
  • 839c9fc ci(workflows): remove Codium-ai pr-agent (#3973)
  • 9dbcc00 ci: bump actions/upload-artifact from 7.0.1 to 7.0.2 (#4136)
  • 76b23b8 ci: bump anchore/sbom-action/download-syft from 0.24.2 to 0.24.3 (#4050)
  • b0c1708 ci: bump docker/setup-buildx-action from 4.3.0 to 4.4.1 (#3898)
  • d6623ff ci: bump github.com/docker/cli from 29.7.2+incompatible to 29.9.0+incompatible (#4130)
  • 42456aa ci: bump github.com/kubescape/rbac-utils from 0.0.21 to 0.0.22 (#4127)
  • 0909d9a ci: bump github.com/kubescape/regolibrary/v2 from 2.0.36 to 2.0.38 (#4126)
  • e1d3528 ci: bump github.com/quay/claircore from 1.5.54 to 1.6.1 (#4129)
  • 74164da ci: bump github.com/sirupsen/logrus from 1.10.1 to 1.10.2 (#4045)
  • df2becc ci: bump github/codeql-action/upload-sarif from 4.38.2 to 4.38.3 (#4135)
  • d145b20 ci: bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.45.0 to 1.47.0 (#4047)
  • af5ce76 ci: bump golang.org/x/term from 0.46.0 to 0.47.0 (#4128)
  • bddb17d ci: bump google.golang.org/api from 0.297.0 to 0.300.0 (#3961)
  • 6682619 ci: bump helm/kind-action from 1.15.0 to 1.15.1 (#4137)
  • a9f1920 ci: bump mikepenz/action-junit-report from 6.5.0 to 6.6.1 (#4133)
  • d01c1de ci: bump sigs.k8s.io/kustomize/kyaml from 0.21.1 to 0.21.2 (#4049)
  • 5c63ca9 ci: skip PR scanner jobs per job instead of by paths-ignore (#4098)
  • e7f54b2 docs(fix): document every --output-dir refusal, and --interactive (#4110)
  • 8489794 docs(security-insights): add contribution review policy (#4145)
  • 8936552 feat(diff): compare image scan reports to surface new and resolved vulnerabilities (#3957)
  • 3b7b90e feat(fix): add interactive mode for granular remediation (#3914)
  • 48d62cf feat(fleet): retry clusters whose API server never answered [LFX 2026] (#4113)
  • 0506387 feat(imagescan): add Red Hat Quay vulnerability adaptor (#4081)
  • 4d883d0 feat(mcp): add list_admission_policies tool (#4112) …

Full release notes »

Technical details

Publisherkubescape
AuthorThe Kubescape Authors
Version4.0.16
Release date2026-10-14
LicenseApache-2.0
Installer typeportable
Architecturex64, arm64
Package IDkubescape.kubescape

Links & install command

Install kubescape from the command line with Windows Package Manager (winget):

winget install --id=kubescape.kubescape -e

best-practicedevopskubernetesmitre-attacknsasecurityvulnerability-detection

Older versions

  • 4.0.15
  • 4.0.14
  • 4.0.13
  • 4.0.12
  • 4.0.11
  • 4.0.10
  • 4.0.9
  • 4.0.8
  • 4.0.7

Related software

Arduino Builder

Arduino Builder 1.0.13

Arduino Builder is a standalone utility for viewing, compiling and uploading Arduino sketch files and compiled ELF or HEX files to Arduino boards with the Arduino serial programming interface, Arduino ISP or USBasp, without the need for the Arduino IDE. The app has a standard user interface with drop down menus to choose the data you need. The functions of the utility can be undertaken in 3 steps. When compiling is required, for uploading sketch file, Arduino Builder scans the sketch for referenced libraries and then builds the necessary libraries automatically. The distribution package contains Arduino 1.0.4 core and library files, AVR GCC compiler toolchain and AVRDUDE. Please be aware that as only the standard Arduino libraries are shipped with the utility, if you want to build with custom libraries, then you will need to place the library source code files with the identical directory name into /arduino/libraries directory.

Development kits · Free · Nov 27, 2019

Download