Your files stay on your device

# Kubernetes security checker

Review pasted Kubernetes manifests against the Pod Security Standards and flag privilege, host access, secrets, and risky services.

Paste a manifest and press Check manifest.
This is a review against the published Pod Security Standards, not enforcement. A clean result only means nothing on the checklist was found in the text you pasted; the cluster still needs Pod Security Admission or a policy engine to reject anything at apply time. The tool reads no cluster state, does not evaluate Helm or Kustomize, skips custom SELinux and AppArmor types, and does not read RoleBindings, so who holds a risky role stays invisible here.OptionsCheck manifest

## More config file tools

- [Compose file visualizer](/config/docker-compose-visualizer)
- [docker run → compose](/config/docker)
- [YAML](/config/yaml)
- [SSH config explainer](/config/ssh)
[All config file tools](/config)

Was this tool useful?
YesNo

---

Canonical HTML: https://nutter.tools/config/kubernetes-security-checker
Markdown version: https://nutter.tools/config/kubernetes-security-checker.md
Plain-text version: https://nutter.tools/config/kubernetes-security-checker.txt
Agent index: https://nutter.tools/llms.txt