Description
01 / Overview
What this service delivers
A working cluster is not necessarily a secure one. By default, every workload can talk to every other, root is the default user for containers, resource limits are absent and secrets are stored with only light encoding in the cluster datastore. We go through your live managed cluster and close each of these gaps while keeping workloads running. Every change is saved as a manifest in version control, which keeps the secured configuration open to review and easy to reproduce.
02 / Deliverables
What you receive 7 items
- 01Default-deny network policies with explicit allow rules for each namespace
- 02An access control review that limits every workload identity to what it requires
- 03Workload security standards enforced, including read-only filesystems and non-root users
- 04CPU and memory limits and requests set from measured usage
- 05Secrets moved to a managed secret store, with controlled sync
- 06Image scanning in the pipeline and a documented policy for critical findings
- 07A residual risk report that notes what we deliberately left unchanged
03 / Fit
Who it suits, and what we need from you
Ideal for
- Clusters built quickly during a migration and never revisited
- Teams completing a security questionnaire for a major customer
- Platforms where one breached workload could get to the database
What we need from you
- Admin access to the cluster, plus a staging cluster that mirrors production
- An owner for each workload to answer our traffic questions
- A change window for switching over network policy
You share these through the technical brief in your dashboard after checkout.
04 / Outcomes
What changes for your team
- 01
A breached container can no longer roam freely across the cluster
- 02
Heavy workloads no longer starve others of CPU and memory
- 03
Documented evidence ready for your next customer security review
This is a remote engineering service, so nothing is shipped physically. Work is delivered into systems you control. Read delivery & handover and refunds & cancellation for the full terms.
Reviews
There are no reviews yet.