Question 1

Why do I need a Kubernetes YAML & Docker security scanner?

Accepted Answer

Misconfigurations in container infrastructure — such as running containers as root, excessive capabilities, or missing resource limits — are the #1 attack vector for hackers. YamlVet.ai automates the code review process and hardens your deployments from the first line of code (Shift-Left Security).

Question 2

What security vulnerabilities does the tool detect?

Accepted Answer

Our engine detects everything from dangerous host mounts, open Telnet/FTP ports, and missing Seccomp/AppArmor profiles in Kubernetes, to insecure :latest tags and leaked secrets in Dockerfiles. All rules are based on the CIS Kubernetes Benchmark v1.12.0 and CIS Docker Benchmark v1.6.0.

Question 3

Is YamlVet.ai really free and safe to use?

Accepted Answer

Yes! The scanner is a fully browser-based tool. All static code analysis and auto-fixing happens locally in your RAM. This makes YamlVet the safest solution for internal corporate security policies. Your code never leaves your machine.

Blog | StackVet