CiliumHound: Graphing Kubernetes Network Policies
SpecterOps released CiliumHound, a BloodHound-based graph tool that visualises Cilium network policies per Kubernetes namespace—giving security teams a fast way to spot segmentation gaps in cloud-native environments.
Summary written by editorial AI · Source link below
TLDR: CiliumHound is a BloodHound OpenGraph extension for auditing Cilium network policies. It ingests a folder of JSON or YAML policies and creates a searchable, Kubernetes namespace-scoped graph. Introduction On some recent assessments, I’ve had to review large, complex Cilium network policies in a Kubernetes cluster, looking for ways in or out of isolated namespaces. […] The post CiliumHound: Graphing Kubernetes Network Policies appeared first on SpecterOps .
Editorial Analysis
Kubernetes network policy misconfigurations are a leading cause of lateral movement in cloud-native breaches; graph-based auditing makes policy gaps visible at scale.
Add CiliumHound to your Kubernetes security toolchain and run an initial audit of Cilium policies across production namespaces.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at SpecterOps in a new tab.
More from the Tools Desk
- Show HN: Agentic Identity Broker, OAuth Delegation for AI Agents3d
- Filter generation in practice: from algorithms to LLMs30 Oct
- RHINO: Guided Reasoning for Mapping Network Logs to Adversarial Tactics and Techniques with Large Language Models28 Oct
- WADBERT: Dual-Channel Web Attack Detection via Permutation-Invariant Parameter Modeling27 Oct
- CVE-to-ATT&CK Mapping via Evidence-Constrained Ranking27 Oct